General

  • Target

    CANVA CRACK PRO.zip

  • Size

    2.0MB

  • Sample

    220926-xplcesbge2

  • MD5

    98684efd97978c12ea220055cf98c258

  • SHA1

    fcd9e5fb33d8bee3a9f3adb93c4157b2915d774f

  • SHA256

    0e9bd347ccbbd15dfcaeb2b245cda326b4e3e6dfbeff404e02e483ee34368117

  • SHA512

    3ba4b8d6b81f853dec874ecd13bfc097b569a2887cab520d5a6d70a3ad2869cbf8c1a9e3ae7459948f3b0d0c8e428fd1cf71e5c224918ec60eff6a24fa48fff5

  • SSDEEP

    49152:G8DgCMqtjfmIJVXhyaiMEqDd8eUG7XjQMsRehyiX4FX/Vfg8L8a:G8ECNhRJVRriM9DkG70M2hJPZgc8a

Score
10/10

Malware Config

Targets

    • Target

      CANVA CRACK PRO.exe

    • Size

      4.0MB

    • MD5

      c95dcd2ed3cf1b51eb5f7293f590f99c

    • SHA1

      f1a6565d6c784546d9a813993e299d4c77222ce9

    • SHA256

      506b67c64e2482e03bcf84d48e341fb25582d9a066ef7b0750aeee180395f497

    • SHA512

      3811fbe106eea48eef549280649ee70915f2c63634d836f74d10e19e9415ccb42c681922dcf2dc988d802f5c5f68fd48bd10b5e551e01dbdb92883966f3e8669

    • SSDEEP

      49152:/Sl61ywhE5Hgljvz5PrOeafe29D+MJclCNv2:/pi5Hgvz5yei9KMJclyv2

    Score
    10/10
    • PhoenixStealer

      PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks