Overview

overview

10

Static

static

3

16816b6027...bb.exe

windows7-x64

10

16816b6027...bb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16816b6027e02cce55c0712baab6171eb9d90d0aebc3fc79b441d63c1c68dabb

  • Size

    4.2MB

  • Sample

    240404-nv6qwaef89

  • MD5

    0e400e6ed80197205ccdc0646f651724

  • SHA1

    5eb32b8777042808031b230b56c90219aac14e9b

  • SHA256

    16816b6027e02cce55c0712baab6171eb9d90d0aebc3fc79b441d63c1c68dabb

  • SHA512

    a78d2a04b44eaa30714077c0ef5022cdfd13174dec75c70836ed634792ffddcf00b87107d43348eae19501bc5ed37051e66fe1eb45d45d4cb507684123c3ddf8

  • SSDEEP

    49152:Jrp0RTvLDh8gKs11AJJyL6BcV7gF19Bdt+7SvU9Sp5vK:shqLB5IS1K

Score
10/10
phemedronestealer

Malware Config

Extracted

Family

phemedrone

C2

10.5.0.2

Targets

    • Target

      16816b6027e02cce55c0712baab6171eb9d90d0aebc3fc79b441d63c1c68dabb

    • Size

      4.2MB

    • MD5

      0e400e6ed80197205ccdc0646f651724

    • SHA1

      5eb32b8777042808031b230b56c90219aac14e9b

    • SHA256

      16816b6027e02cce55c0712baab6171eb9d90d0aebc3fc79b441d63c1c68dabb

    • SHA512

      a78d2a04b44eaa30714077c0ef5022cdfd13174dec75c70836ed634792ffddcf00b87107d43348eae19501bc5ed37051e66fe1eb45d45d4cb507684123c3ddf8

    • SSDEEP

      49152:Jrp0RTvLDh8gKs11AJJyL6BcV7gF19Bdt+7SvU9Sp5vK:shqLB5IS1K

    Score
    10/10
    phemedronestealer

    • Phemedrone

      An information and wallet stealer written in C#.

      stealerphemedrone

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks