Analysis

  • max time kernel
    4294181s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20220311-en
  • submitted
    23-03-2022 04:45

General

  • Target

    63471514.exe

  • Size

    545KB

  • MD5

    97948d40c46b51b3278c6d57854d4fd1

  • SHA1

    a21194a57bf0435d3f653acc5a4ec9998946af85

  • SHA256

    8a5f86a2cb9c2111306ca704b5c88172857faa5ea6a52f8c86db8e3dd72c58a3

  • SHA512

    b0f62212a13076c386caaf54026f6161d45c74611471f93cd8cae20aaa843ee98e1ce5c2de791a0568a12ed8eb249dd7ce28d5b5ce9d0cfb28e1276ad22e5231

Score
10/10

Malware Config

Signatures

  • PhoenixStealer

    PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

Processes

  • C:\Users\Admin\AppData\Local\Temp\63471514.exe
    "C:\Users\Admin\AppData\Local\Temp\63471514.exe"
    1⤵
      PID:580

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/580-54-0x0000000075561000-0x0000000075563000-memory.dmp

      Filesize

      8KB