Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

Phoenix.rar

windows10-1703-x64

3

Phoenix.rar

windows10-2004-x64

8

Phoenix/An...rp.dll

windows10-1703-x64

1

Phoenix/An...rp.dll

windows10-2004-x64

1

Phoenix/Co...le.dll

windows10-1703-x64

1

Phoenix/Co...le.dll

windows10-2004-x64

1

Phoenix/IC...ib.dll

windows10-1703-x64

1

Phoenix/IC...ib.dll

windows10-2004-x64

1

Phoenix/Ne...on.dll

windows10-1703-x64

1

Phoenix/Ne...on.dll

windows10-2004-x64

1

Phoenix/Phoenix.exe

windows10-1703-x64

1

Phoenix/Phoenix.exe

windows10-2004-x64

1

Phoenix/Phoenix.exe

windows10-1703-x64

1

Phoenix/Phoenix.exe

windows10-2004-x64

1

Phoenix/Ph...g.json

windows10-1703-x64

3

Phoenix/Ph...g.json

windows10-2004-x64

3

Phoenix/WebDriver.dll

windows10-1703-x64

1

Phoenix/WebDriver.dll

windows10-2004-x64

1

Phoenix/We...er.dll

windows10-1703-x64

1

Phoenix/We...er.dll

windows10-2004-x64

1

Phoenix/Wo...ns.txt

windows10-1703-x64

1

Phoenix/Wo...ns.txt

windows10-2004-x64

1

Phoenix/se...anager

windows10-1703-x64

1

Phoenix/se...anager

windows10-2004-x64

1

Phoenix/se...anager

windows10-1703-x64

1

Phoenix/se...anager

windows10-2004-x64

1

Phoenix/se...er.exe

windows10-1703-x64

1

Phoenix/se...er.exe

windows10-2004-x64

1

Resubmissions

23/09/2023, 23:40

230923-3n4p9scf28 8

Analysis

  • max time kernel
    314s
  • max time network
    1607s
  • platform
    windows10-1703_x64
  • resource
    win10-20230915-es
  • resource tags

    arch:x64arch:x86image:win10-20230915-eslocale:es-esos:windows10-1703-x64systemwindows
  • submitted
    23/09/2023, 23:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Phoenix/Newtonsoft.Json.dll

  • Size

    679KB

  • MD5

    916d32b899f1bc23b209648d007b99fd

  • SHA1

    e3673d05d46f29e68241d4536bddf18cdd0a913d

  • SHA256

    72cf291d4bab0edd08a9b07c6173e1e7ad1abb7ab727fd7044bf6305d7515661

  • SHA512

    60bd2693daa42637f8ae6d6460c3013c87f46f28e9b0dbf9d7f6764703b904a7c8c22e30b4ba13f1f23f6cbee7d9640ee3821c48110e67440f237c2bb2ee5eb6

  • SSDEEP

    12288:1eos/POdGV5jfWrV/9Yeh9eRcyLfLYtT5mWxTZ/B7jW5JMtRRpKzQk:10/POdGV5jfW5VnhFyvOB7jW5JMty

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Phoenix\Newtonsoft.Json.dll,#1
    1⤵
      PID:3536

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads