General
-
Target
CANVA CRACK PRO.zip
-
Size
2.0MB
-
Sample
220926-xplcesbge2
-
MD5
98684efd97978c12ea220055cf98c258
-
SHA1
fcd9e5fb33d8bee3a9f3adb93c4157b2915d774f
-
SHA256
0e9bd347ccbbd15dfcaeb2b245cda326b4e3e6dfbeff404e02e483ee34368117
-
SHA512
3ba4b8d6b81f853dec874ecd13bfc097b569a2887cab520d5a6d70a3ad2869cbf8c1a9e3ae7459948f3b0d0c8e428fd1cf71e5c224918ec60eff6a24fa48fff5
-
SSDEEP
49152:G8DgCMqtjfmIJVXhyaiMEqDd8eUG7XjQMsRehyiX4FX/Vfg8L8a:G8ECNhRJVRriM9DkG70M2hJPZgc8a
Static task
static1
Behavioral task
behavioral1
Sample
CANVA CRACK PRO.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
CANVA CRACK PRO.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
CANVA CRACK PRO.exe
-
Size
4.0MB
-
MD5
c95dcd2ed3cf1b51eb5f7293f590f99c
-
SHA1
f1a6565d6c784546d9a813993e299d4c77222ce9
-
SHA256
506b67c64e2482e03bcf84d48e341fb25582d9a066ef7b0750aeee180395f497
-
SHA512
3811fbe106eea48eef549280649ee70915f2c63634d836f74d10e19e9415ccb42c681922dcf2dc988d802f5c5f68fd48bd10b5e551e01dbdb92883966f3e8669
-
SSDEEP
49152:/Sl61ywhE5Hgljvz5PrOeafe29D+MJclCNv2:/pi5Hgvz5yei9KMJclyv2
Score10/10-
PhoenixStealer
PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.
-
Suspicious use of SetThreadContext
-