Overview

overview

10

Static

static

3

255d887e4a...8c.exe

windows7-x64

10

255d887e4a...8c.exe

windows10-2004-x64

10

Resubmissions

26-10-2023 15:54

231026-tcpyasee86 10

06-10-2023 13:47

231006-q3wa8aec36 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.4c51b62c9ee7a37ddc010e48b516c243bin_JC.zip

  • Size

    972KB

  • Sample

    231006-q3wa8aec36

  • MD5

    a283bbb3ea0559ebe25f5b0cc1bf7702

  • SHA1

    2d468b3da88d3f9ab9134326e265ddea968bd8d5

  • SHA256

    a3402483c091c4fbe6afb054aa2dcd88a54687c9210cd9fc194b9671c31d548f

  • SHA512

    6bf9bfe8dc7ac12c2778307a743ae9e7c14fe9c6d4b24aee557589d106fe9d969e4f0a3f278d93971e20a324db0ffa2ddcd0aaf7d855e3828ac6eb25519c0a5f

  • SSDEEP

    24576:JtNK6/UgZTYnsE9VW5Ll6mA5bFtcjgNaiBNnYNjnK+FD1Fa/tA:DNx/Ui8cxA5bXtNPl4KIva/tA

Score
10/10
phemedronespywarestealer

Malware Config

Targets

    • Target

      255d887e4aee44b4a811fd99c76d7df6ce442316125d236f9b3891bd56b82f8c.exe

    • Size

      3.8MB

    • MD5

      4c51b62c9ee7a37ddc010e48b516c243

    • SHA1

      77b6f4ce0867078a8d7c02fa1254912b6f4c0d00

    • SHA256

      255d887e4aee44b4a811fd99c76d7df6ce442316125d236f9b3891bd56b82f8c

    • SHA512

      8e292a6125309ad8e26606b4682001a8cfa8038818a9b28e4070a5133b73083bac608c48f00ae30e38fea170186de7e5da9c3528f8a55685c44d923c029e1adb

    • SSDEEP

      49152:T+eKofn4V0kl/gaMHqAwl6hXsM75LwV71pG7XPQx7PtwlSr+Ucbf3QC3aLVeolcB:

    Score
    10/10
    phemedronestealerspyware

    • Phemedrone

      An information and wallet stealer written in C#.

      stealerphemedrone

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks