General
- Target terror.exe
- Size 4.1MB
- Sample220811-s3meeshacl
- SHA256 114597ce6ce72d2e30ba0d86e20562c2e6b477838d30ed6ec998f315573bc1ba
- MD5 77dd31adbf6895ba075fa0e4864b0017
- SHA1 bed7e4ae5247c536868a4474c640fe808dc05bf7
- SHA512 dc7c4ec8a9f6d091d263713b5c321318c44844126e64ae51ca4d73ea85424854f382ba7ee34c96290c1eab44433bbfbcf23f467245ae64f58b5640db4cf8a630
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
terror.exe
Resource
win7-20220718-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
terror.exe
Resource
win10v2004-20220721-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target terror.exe
- Size 4.1MB
- SHA256 114597ce6ce72d2e30ba0d86e20562c2e6b477838d30ed6ec998f315573bc1ba
- MD5 77dd31adbf6895ba075fa0e4864b0017
- SHA1 bed7e4ae5247c536868a4474c640fe808dc05bf7
- SHA512 dc7c4ec8a9f6d091d263713b5c321318c44844126e64ae51ca4d73ea85424854f382ba7ee34c96290c1eab44433bbfbcf23f467245ae64f58b5640db4cf8a630
- MD5 SHA1 SHA512
Score10/10-
PhoenixStealer
PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.
-
Suspicious use of SetThreadContext