Overview

overview

10

Static

static

10

Famukic.exe

windows7-x64

10

Famukic.exe

windows10-2004-x64

10

Resubmissions

11-06-2024 15:13

240611-sl24js1era 10

09-06-2024 12:02

240609-n7wrfaba55 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Famukic.exe

  • Size

    115KB

  • Sample

    240611-sl24js1era

  • MD5

    0e87127c62af8ac1acb7e31eb40b37ad

  • SHA1

    5b2720be2e4184703328de07a26fa5379ff22900

  • SHA256

    b69cfd99cea7725899e9241dac1ede0fc9e8b0aa064d782eb4b3646fede91a0a

  • SHA512

    c3d7cd3366de05f9960cfa14da7937fe0f954d3bdd2d74dc4038bde105613a36ff4f5739b78b8b5500dacbb83258519610f50359affa8dde910cc26e7e1c7a34

  • SSDEEP

    1536:5sA48yE/HZC3R5z8KFekYnCa6wbNFL5g7vVIjnGo4cqiN34OlxalC7RCYrc:aCyTXgKFek/wv5+IKNcowxwwCT

Score
10/10
phemedronespywarestealer

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot7079797423:AAGi-EpMA7Ox2fNQaC17SmY3SzTvGbM5K_o/sendDocument

Targets

    • Target

      Famukic.exe

    • Size

      115KB

    • MD5

      0e87127c62af8ac1acb7e31eb40b37ad

    • SHA1

      5b2720be2e4184703328de07a26fa5379ff22900

    • SHA256

      b69cfd99cea7725899e9241dac1ede0fc9e8b0aa064d782eb4b3646fede91a0a

    • SHA512

      c3d7cd3366de05f9960cfa14da7937fe0f954d3bdd2d74dc4038bde105613a36ff4f5739b78b8b5500dacbb83258519610f50359affa8dde910cc26e7e1c7a34

    • SSDEEP

      1536:5sA48yE/HZC3R5z8KFekYnCa6wbNFL5g7vVIjnGo4cqiN34OlxalC7RCYrc:aCyTXgKFek/wv5+IKNcowxwwCT

    Score
    10/10
    phemedronespywarestealer

    • Phemedrone

      An information and wallet stealer written in C#.

      stealerphemedrone

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks