General
-
Target
52768773.exe
-
Size
1.1MB
-
Sample
220322-x1h2fahah5
-
MD5
cab000059d249508c491d28e0fecc84e
-
SHA1
12ab2f870432381662ca2c3390026b585a3a3422
-
SHA256
6b3260201ea9fb85f2374c809140463ae0e47398c1c8a0c07e54724f82a34c71
-
SHA512
9f3963dd8ed36d3c90bb151aa5a0e327c2984c09c8c0d1cd2cf5e372043217794e6b6de668ee53e4ae699d595efec41de51c350e60f79f34c01ed431218d19be
Static task
static1
Behavioral task
behavioral1
Sample
52768773.exe
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
52768773.exe
Resource
win10v2004-20220310-en
Malware Config
Targets
-
-
Target
52768773.exe
-
Size
1.1MB
-
MD5
cab000059d249508c491d28e0fecc84e
-
SHA1
12ab2f870432381662ca2c3390026b585a3a3422
-
SHA256
6b3260201ea9fb85f2374c809140463ae0e47398c1c8a0c07e54724f82a34c71
-
SHA512
9f3963dd8ed36d3c90bb151aa5a0e327c2984c09c8c0d1cd2cf5e372043217794e6b6de668ee53e4ae699d595efec41de51c350e60f79f34c01ed431218d19be
Score10/10-
PhoenixStealer
PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.
-
Suspicious use of SetThreadContext
-