General
-
Target
q.exe
-
Size
2.8MB
-
Sample
220707-jeng5sfbdm
-
MD5
77636b47fc9e1bc61a4a019371e09390
-
SHA1
615275ae7a28ee86cd9f4f586a3c7c5366490444
-
SHA256
7fbed14d0d7d52a459fc29bae6a62eedd0a69649049b8f9ac37e1297acc3b277
-
SHA512
ea73fe48dc36d0dd2344e3389bb70a7f047a210f08578bdb5ff4e690e3f95fab0412edcb52819234ca28ff0d983fa8646bc1e2e76f1134df937896f115f8c37d
Static task
static1
Behavioral task
behavioral1
Sample
q.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
q.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
q.exe
-
Size
2.8MB
-
MD5
77636b47fc9e1bc61a4a019371e09390
-
SHA1
615275ae7a28ee86cd9f4f586a3c7c5366490444
-
SHA256
7fbed14d0d7d52a459fc29bae6a62eedd0a69649049b8f9ac37e1297acc3b277
-
SHA512
ea73fe48dc36d0dd2344e3389bb70a7f047a210f08578bdb5ff4e690e3f95fab0412edcb52819234ca28ff0d983fa8646bc1e2e76f1134df937896f115f8c37d
Score10/10-
PhoenixStealer
PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.
-
Suspicious use of SetThreadContext
-