Overview
overview
3Static
static
3Phoenix/An...rp.dll
windows7-x64
1Phoenix/An...rp.dll
windows10-2004-x64
1Phoenix/Co...le.dll
windows7-x64
1Phoenix/Co...le.dll
windows10-2004-x64
1Phoenix/IC...ib.dll
windows7-x64
1Phoenix/IC...ib.dll
windows10-2004-x64
1Phoenix/Ne...on.dll
windows7-x64
1Phoenix/Ne...on.dll
windows10-2004-x64
1Phoenix/Phoenix.exe
windows7-x64
1Phoenix/Phoenix.exe
windows10-2004-x64
1Phoenix/Phoenix.exe
windows7-x64
1Phoenix/Phoenix.exe
windows10-2004-x64
1Phoenix/Ph...g.json
windows7-x64
3Phoenix/Ph...g.json
windows10-2004-x64
3Phoenix/WebDriver.dll
windows7-x64
1Phoenix/WebDriver.dll
windows10-2004-x64
1Phoenix/We...er.dll
windows7-x64
1Phoenix/We...er.dll
windows10-2004-x64
1Phoenix/Wo...ns.txt
windows7-x64
1Phoenix/Wo...ns.txt
windows10-2004-x64
1Phoenix/mu...ns.txt
windows7-x64
1Phoenix/mu...ns.txt
windows10-2004-x64
1Phoenix/se...anager
ubuntu-18.04-amd64
3Phoenix/se...anager
macos-10.15-amd64
1Phoenix/se...er.exe
windows7-x64
1Phoenix/se...er.exe
windows10-2004-x64
1Phoenix/token.txt
windows7-x64
1Phoenix/token.txt
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
19-07-2024 20:29
Static task
static1
Behavioral task
behavioral1
Sample
Phoenix/AngleSharp.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Phoenix/AngleSharp.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Phoenix/Colorful.Console.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Phoenix/Colorful.Console.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Phoenix/ICSharpCode.SharpZipLib.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Phoenix/ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
Phoenix/Newtonsoft.Json.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Phoenix/Newtonsoft.Json.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
Phoenix/Phoenix.exe
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Phoenix/Phoenix.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
Phoenix/Phoenix.exe
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Phoenix/Phoenix.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
Phoenix/Phoenix.runtimeconfig.json
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Phoenix/Phoenix.runtimeconfig.json
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
Phoenix/WebDriver.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Phoenix/WebDriver.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
Phoenix/WebDriverManager.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Phoenix/WebDriverManager.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
Phoenix/WorkingTokens.txt
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Phoenix/WorkingTokens.txt
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
Phoenix/multitokens.txt
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Phoenix/multitokens.txt
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
Phoenix/selenium-manager/linux/selenium-manager
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral24
Sample
Phoenix/selenium-manager/macos/selenium-manager
Resource
macos-20240711.1-en
Behavioral task
behavioral25
Sample
Phoenix/selenium-manager/windows/selenium-manager.exe
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
Phoenix/selenium-manager/windows/selenium-manager.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
Phoenix/token.txt
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
Phoenix/token.txt
Resource
win10v2004-20240709-en
General
-
Target
Phoenix/WorkingTokens.txt
-
Size
72B
-
MD5
605fb0eb86149575ddf8f1dfce9fe04f
-
SHA1
572295f401facfca5cc7eb0a8daa52da7cc0f5c9
-
SHA256
964cf36c864eacdbdc3c4cdd1ba6870b6e6ed1abc7f358e78ba436a16a38f900
-
SHA512
450de9b00570a44f29aff68f1b4dc2f964f69594a1a81a43edf34e5c8ca5ca82c7b02748aa7ced8726961da3f96413f941e44703628f9d9ff9a04d7662498463
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes:
NOTEPAD.EXEpid process 1976 NOTEPAD.EXE