Analysis

  • max time kernel
    139s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    25-03-2022 07:09

General

  • Target

    1810_1647779865_1503.exe

  • Size

    545KB

  • MD5

    1ab7575a16f8ffc88d030fc9143b2a71

  • SHA1

    f92a10b7670a2d00eb399fbf6323426a13d126cd

  • SHA256

    bfdfc7bdb3890683e8d3b5f3d9cae5048de3cbedebf223e4b9b732b096917beb

  • SHA512

    6b303cba708749299b4e9540bbfe123a9f67a772ff9d99e587c1456e47c8554df49becf0305ba2f9ec86eb46a50cebd1cd631823a00c6c5d0d2f51b91dcbe11e

Score
10/10

Malware Config

Signatures

  • PhoenixStealer

    PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1810_1647779865_1503.exe
    "C:\Users\Admin\AppData\Local\Temp\1810_1647779865_1503.exe"
    1⤵
      PID:4028

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads