Overview

overview

10

Static

static

10

Alozyry.exe

windows7-x64

10

Alozyry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Alozyry.exe

  • Size

    111KB

  • Sample

    240707-2dgbjsyhrj

  • MD5

    6c2c7ef5b5716d674991e364750ff233

  • SHA1

    abce149b0532326458909c21e6e13063a92f3251

  • SHA256

    ad9c3a743ab48629ef8b02e26c82cb0f497669d8ae3b236758f997f695e78c73

  • SHA512

    cf673f324030bb23bfce9e09d3c8d10ceb108fb962557a141f1200d31e89ec4e4c1654d3d6c0657eb38ba4942ab0cc6a7bfffd6159c8d989214c6b94350113ea

  • SSDEEP

    1536:L66Cxsr7any9okBEO623Dnii5/u/TMhDLLUfmK5eR+2yMV:Qx6any1EO623/5G/Q1LQmK5eRFt

Score
10/10
phemedronespywarestealer

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot6861530662:AAFueJRxaIZGz_oVT2-CVuuL9N0MRsh-5_Y/sendDocument

Targets

    • Target

      Alozyry.exe

    • Size

      111KB

    • MD5

      6c2c7ef5b5716d674991e364750ff233

    • SHA1

      abce149b0532326458909c21e6e13063a92f3251

    • SHA256

      ad9c3a743ab48629ef8b02e26c82cb0f497669d8ae3b236758f997f695e78c73

    • SHA512

      cf673f324030bb23bfce9e09d3c8d10ceb108fb962557a141f1200d31e89ec4e4c1654d3d6c0657eb38ba4942ab0cc6a7bfffd6159c8d989214c6b94350113ea

    • SSDEEP

      1536:L66Cxsr7any9okBEO623Dnii5/u/TMhDLLUfmK5eR+2yMV:Qx6any1EO623/5G/Q1LQmK5eRFt

    Score
    10/10
    phemedronespywarestealer

    • Phemedrone

      An information and wallet stealer written in C#.

      stealerphemedrone

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks