Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
05-04-2024 03:39
General
-
Target
c9c937d7791010e40713bf9c7812a532_JaffaCakes118.exe
-
Size
546KB
-
MD5
c9c937d7791010e40713bf9c7812a532
-
SHA1
2d09ec0b24b7eb281d5e37ad3cf3fd9fe9336615
-
SHA256
43b21e60d088a3eba1b23f5aac9deb39d86f27a819a2e179a7edbdfd407264af
-
SHA512
2afc3e89b8bdbd2dd280802bb73d11fb5a4d41b6100ae6c1bc61aa099f3387c91068b9478c4888800e4fde6e70cc43bebd258b33e4b09809b3f1c103a0fc132f
-
SSDEEP
12288:aWWzIRlRn2/rw7INjVGCXZq0iiIxTp5TQdIJWjI0g0A8Hcqr4d:aWUWrnIrw7I1VGCXZbiiEQdAWngR8k
Score
10/10
Malware Config
Signatures
-
PhoenixStealer
PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c9c937d7791010e40713bf9c7812a532_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\c9c937d7791010e40713bf9c7812a532_JaffaCakes118.exe"1⤵