General

  • Target
    Iputeny.exe
  • Size 84KB
  • Sample231108-xdwc9aee46
  • SHA256 64503745802796c734b5c3b6e62a5ba2b40fde46fe5a3ea1e8f7b37b49b2df92
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • phemedrone

C2
  • https://api.telegram.org/bot6869946861:AAFp2CTwZLT6Luum35cQR_IF-4kGxK5jIYM/sendMessage?chat_id=6919564136

Targets

    • Target
      Iputeny.exe
    • Size 84KB
    • SHA256 64503745802796c734b5c3b6e62a5ba2b40fde46fe5a3ea1e8f7b37b49b2df92
    • MD5 SHA1 SHA512 SSDEEP
    • Phemedrone

      An information and wallet stealer written in C#.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks