Overview

overview

10

Static

static

10

COMPILED/P...ls.exe

windows7-x64

1

COMPILED/P...ls.exe

windows10-2004-x64

1

COMPILED/dnlib.dll

windows7-x64

1

COMPILED/dnlib.dll

windows10-2004-x64

1

COMPILED/s...ub.exe

windows7-x64

10

COMPILED/s...ub.exe

windows10-2004-x64

10

SRC/Phemed...ect.js

windows7-x64

3

SRC/Phemed...ect.js

windows10-2004-x64

3

SRC/Phemed...ypt.js

windows7-x64

3

SRC/Phemed...ypt.js

windows10-2004-x64

3

SRC/Phemed...yDB.js

windows7-x64

3

SRC/Phemed...yDB.js

windows10-2004-x64

3

SRC/Phemed...Gcm.js

windows7-x64

3

SRC/Phemed...Gcm.js

windows10-2004-x64

3

SRC/Phemed...Der.js

windows7-x64

3

SRC/Phemed...Der.js

windows10-2004-x64

3

SRC/Phemed...Api.js

windows7-x64

3

SRC/Phemed...Api.js

windows10-2004-x64

3

SRC/Phemed...PBE.js

windows7-x64

3

SRC/Phemed...PBE.js

windows10-2004-x64

3

SRC/Phemed...DF2.js

windows7-x64

3

SRC/Phemed...DF2.js

windows10-2004-x64

3

SRC/Phemed...ers.js

windows7-x64

3

SRC/Phemed...ers.js

windows10-2004-x64

3

SRC/Phemed...Des.js

windows7-x64

3

SRC/Phemed...Des.js

windows10-2004-x64

3

SRC/Phemed...ers.js

windows7-x64

3

SRC/Phemed...ers.js

windows10-2004-x64

3

SRC/Phemed...ger.js

windows7-x64

3

SRC/Phemed...ger.js

windows10-2004-x64

3

SRC/Phemed...der.js

windows7-x64

3

SRC/Phemed...der.js

windows10-2004-x64

3

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    18-05-2024 06:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SRC/Phemedrone-Stealer/Cryptography/AesGcm.js

  • Size

    7KB

  • MD5

    89c7e40789bd631483ecafbc1efc4660

  • SHA1

    da14521bab77326cbdf6088a1d2dff1f003a6ed7

  • SHA256

    120fcd4e10c3d70d0371f80fdd5d743e00c406020e1dd1fa60cdc101525d1764

  • SHA512

    a4a964001897519801c6aa28dcc805985ea426c35d881e2239a1c73ffc9a8b676fd62409ce8a5614d1efb207cc01c510bc38554c04b55794adac85528600f07e

  • SSDEEP

    96:Co4D2n1cWxZbc5J1GoerqXb4lnlbSwcOOlXOsRSOl0lClWRtyvJMYWkW0lUg6lD8:YqXxe5J1GoeO0lbGh90euiUg2ZqXSHtY

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\SRC\Phemedrone-Stealer\Cryptography\AesGcm.js
    1⤵
      PID:2128

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads