5fd4ee77422fdeca0bd432241855b562a6c1162ba734579c2cf7557f2829c9e2 | Triage

Submit
Reports

Overview

overview

3

Static

static

3

Phoenix/An...rp.dll

windows7-x64

1

Phoenix/An...rp.dll

windows10-2004-x64

1

Phoenix/Co...le.dll

windows7-x64

1

Phoenix/Co...le.dll

windows10-2004-x64

1

Phoenix/IC...ib.dll

windows7-x64

1

Phoenix/IC...ib.dll

windows10-2004-x64

1

Phoenix/Ne...on.dll

windows7-x64

1

Phoenix/Ne...on.dll

windows10-2004-x64

1

Phoenix/Phoenix.exe

windows7-x64

1

Phoenix/Phoenix.exe

windows10-2004-x64

1

Phoenix/Phoenix.exe

windows7-x64

1

Phoenix/Phoenix.exe

windows10-2004-x64

1

Phoenix/Ph...g.json

windows7-x64

3

Phoenix/Ph...g.json

windows10-2004-x64

3

Phoenix/WebDriver.dll

windows7-x64

1

Phoenix/WebDriver.dll

windows10-2004-x64

1

Phoenix/We...er.dll

windows7-x64

1

Phoenix/We...er.dll

windows10-2004-x64

1

Phoenix/Wo...ns.txt

windows7-x64

1

Phoenix/Wo...ns.txt

windows10-2004-x64

1

Phoenix/mu...ns.txt

windows7-x64

1

Phoenix/mu...ns.txt

windows10-2004-x64

1

Phoenix/se...anager

ubuntu-18.04-amd64

3

Phoenix/se...anager

macos-10.15-amd64

1

Phoenix/se...er.exe

windows7-x64

1

Phoenix/se...er.exe

windows10-2004-x64

1

Phoenix/token.txt

windows7-x64

1

Phoenix/token.txt

windows10-2004-x64

1

Analysis

max time kernel
109s
max time network
142s
platform
macos-10.15_amd64
resource
macos-20240711.1-en
resource tags

arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
19-07-2024 20:29

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Phoenix/AngleSharp.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Phoenix/AngleSharp.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Phoenix/Colorful.Console.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Phoenix/Colorful.Console.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Phoenix/ICSharpCode.SharpZipLib.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Phoenix/ICSharpCode.SharpZipLib.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Phoenix/Newtonsoft.Json.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Phoenix/Newtonsoft.Json.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Phoenix/Phoenix.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Phoenix/Phoenix.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Phoenix/Phoenix.exe

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Phoenix/Phoenix.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Phoenix/Phoenix.runtimeconfig.json

Resource

win7-20240708-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

Phoenix/Phoenix.runtimeconfig.json

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Phoenix/WebDriver.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Phoenix/WebDriver.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Phoenix/WebDriverManager.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Phoenix/WebDriverManager.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Phoenix/WorkingTokens.txt

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Phoenix/WorkingTokens.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Phoenix/multitokens.txt

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Phoenix/multitokens.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Phoenix/selenium-manager/linux/selenium-manager

Resource

ubuntu1804-amd64-20240508-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

Phoenix/selenium-manager/macos/selenium-manager

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Phoenix/selenium-manager/windows/selenium-manager.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Phoenix/selenium-manager/windows/selenium-manager.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Phoenix/token.txt

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Phoenix/token.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

Phoenix/selenium-manager/macos/selenium-manager
Size

3.4MB
MD5

83f9afe3e15bd336a890986a468b524a
SHA1

9c8f2e127a5a9ed45ab415fe8ab4133f7f7876d9
SHA256

45d77e84cf3162fbe314f71bb2a973fcc9e1403bc2ceabedcd12bc54d6949bbf
SHA512

69fbbc4536206c56f05d28d0a0d3c915501f8ed54fe4cccc02dc3ad6a9117fc6b4daab17bf7acd4781f6afa31479e9fe21cff3f7edd8498b7aaeb7dab4db8cb0
SSDEEP

98304:hcdZamx59U8CIVO1btTbpRmQ+il5oAHTd:ap4bUQym

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/Phoenix/selenium-manager/macos/selenium-manager\""
1⤵
PID:487

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/Phoenix/selenium-manager/macos/selenium-manager\""
1⤵
PID:487

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/Phoenix/selenium-manager/macos/selenium-manager
1⤵
PID:487

/bin/zsh
/bin/zsh -c /Users/run/Phoenix/selenium-manager/macos/selenium-manager
2⤵
PID:488

/Users/run/Phoenix/selenium-manager/macos/selenium-manager
/Users/run/Phoenix/selenium-manager/macos/selenium-manager
2⤵
PID:488

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon
1⤵
PID:524

/bin/launchctl
/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon
1⤵
PID:525

/usr/libexec/xpcproxy
xpcproxy com.apple.newsyslog
1⤵
PID:529

/usr/sbin/newsyslog
/usr/sbin/newsyslog
1⤵
PID:529

/usr/libexec/xpcproxy
xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E
1⤵
PID:530

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService
1⤵
PID:530

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy