General

  • Target

    q.exe

  • Size

    2.8MB

  • Sample

    220707-jeng5sfbdm

  • MD5

    77636b47fc9e1bc61a4a019371e09390

  • SHA1

    615275ae7a28ee86cd9f4f586a3c7c5366490444

  • SHA256

    7fbed14d0d7d52a459fc29bae6a62eedd0a69649049b8f9ac37e1297acc3b277

  • SHA512

    ea73fe48dc36d0dd2344e3389bb70a7f047a210f08578bdb5ff4e690e3f95fab0412edcb52819234ca28ff0d983fa8646bc1e2e76f1134df937896f115f8c37d

Score
10/10

Malware Config

Targets

    • Target

      q.exe

    • Size

      2.8MB

    • MD5

      77636b47fc9e1bc61a4a019371e09390

    • SHA1

      615275ae7a28ee86cd9f4f586a3c7c5366490444

    • SHA256

      7fbed14d0d7d52a459fc29bae6a62eedd0a69649049b8f9ac37e1297acc3b277

    • SHA512

      ea73fe48dc36d0dd2344e3389bb70a7f047a210f08578bdb5ff4e690e3f95fab0412edcb52819234ca28ff0d983fa8646bc1e2e76f1134df937896f115f8c37d

    Score
    10/10
    • PhoenixStealer

      PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks