Overview
overview
3Static
static
1Phantoms F...an.vbs
windows10-2004-x64
1Phantoms F...an.vbs
windows11-21h2-x64
1Phantoms F...All.js
windows10-2004-x64
3Phantoms F...All.js
windows11-21h2-x64
3Phantoms F...mps.js
windows10-2004-x64
3Phantoms F...mps.js
windows11-21h2-x64
3Phantoms F...veM.js
windows10-2004-x64
3Phantoms F...veM.js
windows11-21h2-x64
3Phantoms F...ces.js
windows10-2004-x64
3Phantoms F...ces.js
windows11-21h2-x64
3Phantoms F...ces.js
windows10-2004-x64
3Phantoms F...ces.js
windows11-21h2-x64
3Phantoms F...tra.js
windows10-2004-x64
3Phantoms F...tra.js
windows11-21h2-x64
3Phantoms F...ra.vbs
windows10-2004-x64
1Phantoms F...ra.vbs
windows11-21h2-x64
1Phantoms F...rm1.js
windows10-2004-x64
3Phantoms F...rm1.js
windows11-21h2-x64
3Phantoms F...m1.vbs
windows10-2004-x64
1Phantoms F...m1.vbs
windows11-21h2-x64
1Phantoms F...er.vbs
windows10-2004-x64
1Phantoms F...er.vbs
windows11-21h2-x64
1Phantoms F...es.vbs
windows10-2004-x64
1Phantoms F...es.vbs
windows11-21h2-x64
1Analysis
-
max time kernel
93s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
08/06/2024, 04:26 UTC
Static task
static1
Behavioral task
behavioral1
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Clean.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Clean.vbs
Resource
win11-20240426-en
Behavioral task
behavioral3
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/CleanAll.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral4
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/CleanAll.js
Resource
win11-20240426-en
Behavioral task
behavioral5
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/CleanAllTemps.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral6
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/CleanAllTemps.js
Resource
win11-20240508-en
Behavioral task
behavioral7
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/CleanFiveM.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral8
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/CleanFiveM.js
Resource
win11-20240508-en
Behavioral task
behavioral9
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/CleanGameTraces.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral10
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/CleanGameTraces.js
Resource
win11-20240508-en
Behavioral task
behavioral11
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/CleanOtherTraces.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral12
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/CleanOtherTraces.js
Resource
win11-20240508-en
Behavioral task
behavioral13
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Extra.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral14
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Extra.js
Resource
win11-20240419-en
Behavioral task
behavioral15
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Extra.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral16
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Extra.vbs
Resource
win11-20240426-en
Behavioral task
behavioral17
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Form1.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral18
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Form1.js
Resource
win11-20240508-en
Behavioral task
behavioral19
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Form1.vbs
Resource
win10v2004-20240426-en
Behavioral task
behavioral20
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Form1.vbs
Resource
win11-20240426-en
Behavioral task
behavioral21
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Properties/Resources.Designer.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral22
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Properties/Resources.Designer.vbs
Resource
win11-20240426-en
Behavioral task
behavioral23
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Properties/Resources.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral24
Sample
Phantoms Free Cleaner SOURCE/BetterCleaner/Properties/Resources.vbs
Resource
win11-20240508-en
General
-
Target
Phantoms Free Cleaner SOURCE/BetterCleaner/CleanFiveM.js
-
Size
3KB
-
MD5
a3319de8e72c427d0374c2a6455855c9
-
SHA1
2e975350ec9b0a6fe5f4f02158080a0c6877a9ac
-
SHA256
4bca763bc0f007c832817ca9254a0befea9d8ebcadb1a7d7aae4e470c4f49bfc
-
SHA512
977c0e0841f1a3945fbe9d691a6dbba1627830451ec2b24f51a6afef7fa0fd320a318f87af6cc80c64cdd9ff28da8a4bb94f5d595410bb3e674e3b45e3d59d0a
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
Network
-
Remote address:8.8.8.8:53Request209.205.72.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request80.90.14.23.in-addr.arpaIN PTRResponse80.90.14.23.in-addr.arpaIN PTRa23-14-90-80deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request14.160.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request241.150.49.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request157.123.68.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request171.39.242.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request14.227.111.52.in-addr.arpaIN PTRResponse
-
72 B 158 B 1 1
DNS Request
209.205.72.20.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
80.90.14.23.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
14.160.190.20.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
241.150.49.20.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
157.123.68.40.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
171.39.242.20.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
14.227.111.52.in-addr.arpa