Analysis
-
max time kernel
93s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15-07-2024 15:34
General
-
Target
Bupyges.exe
-
Size
116KB
-
MD5
7ff72aafd4c957f58521c2cd3b69c811
-
SHA1
85755b0d563450c987ddf3bc006bcf48ee27b961
-
SHA256
9efce9aeeb96e202c9155617a7208a6566511b58a46534d1c9bb12275175dd8a
-
SHA512
7aa3f52c02e13a1a69697bbdfaf1b288adb42205ecdeaf72535aeb0e245f7aaa5fd68a9cb7fe57ed346ba3c95cf99b6be328255bc0a8522325e1b1625bd4b6db
-
SSDEEP
3072:jPFASpM5tNCtxaOSdYxa5zAvMdead8+BVK7RHaJbW:TFvpMd6aOSdYxoAEYad8+nK7RHaJb
Score
10/10
Malware Config
Extracted
Family
phemedrone
C2
127.0.0.1:22222
Signatures
-
Phemedrone
An information and wallet stealer written in C#.
-
Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Bupyges.exe"C:\Users\Admin\AppData\Local\Temp\Bupyges.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
144KB
-
Filesize
10.8MB
-
Filesize
10.8MB