5fd4ee77422fdeca0bd432241855b562a6c1162ba734579c2cf7557f2829c9e2 | Triage

Submit
Reports

Overview

overview

3

Static

static

3

Phoenix/An...rp.dll

windows7-x64

1

Phoenix/An...rp.dll

windows10-2004-x64

1

Phoenix/Co...le.dll

windows7-x64

1

Phoenix/Co...le.dll

windows10-2004-x64

1

Phoenix/IC...ib.dll

windows7-x64

1

Phoenix/IC...ib.dll

windows10-2004-x64

1

Phoenix/Ne...on.dll

windows7-x64

1

Phoenix/Ne...on.dll

windows10-2004-x64

1

Phoenix/Phoenix.exe

windows7-x64

1

Phoenix/Phoenix.exe

windows10-2004-x64

1

Phoenix/Phoenix.exe

windows7-x64

1

Phoenix/Phoenix.exe

windows10-2004-x64

1

Phoenix/Ph...g.json

windows7-x64

3

Phoenix/Ph...g.json

windows10-2004-x64

3

Phoenix/WebDriver.dll

windows7-x64

1

Phoenix/WebDriver.dll

windows10-2004-x64

1

Phoenix/We...er.dll

windows7-x64

1

Phoenix/We...er.dll

windows10-2004-x64

1

Phoenix/Wo...ns.txt

windows7-x64

1

Phoenix/Wo...ns.txt

windows10-2004-x64

1

Phoenix/mu...ns.txt

windows7-x64

1

Phoenix/mu...ns.txt

windows10-2004-x64

1

Phoenix/se...anager

ubuntu-18.04-amd64

3

Phoenix/se...anager

macos-10.15-amd64

1

Phoenix/se...er.exe

windows7-x64

1

Phoenix/se...er.exe

windows10-2004-x64

1

Phoenix/token.txt

windows7-x64

1

Phoenix/token.txt

windows10-2004-x64

1

Analysis

max time kernel
140s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19-07-2024 20:29

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Phoenix/AngleSharp.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Phoenix/AngleSharp.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Phoenix/Colorful.Console.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Phoenix/Colorful.Console.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Phoenix/ICSharpCode.SharpZipLib.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Phoenix/ICSharpCode.SharpZipLib.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Phoenix/Newtonsoft.Json.dll

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Phoenix/Newtonsoft.Json.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Phoenix/Phoenix.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Phoenix/Phoenix.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Phoenix/Phoenix.exe

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Phoenix/Phoenix.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Phoenix/Phoenix.runtimeconfig.json

Resource

win7-20240708-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

Phoenix/Phoenix.runtimeconfig.json

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Phoenix/WebDriver.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Phoenix/WebDriver.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Phoenix/WebDriverManager.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Phoenix/WebDriverManager.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Phoenix/WorkingTokens.txt

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Phoenix/WorkingTokens.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Phoenix/multitokens.txt

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Phoenix/multitokens.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Phoenix/selenium-manager/linux/selenium-manager

Resource

ubuntu1804-amd64-20240508-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

Phoenix/selenium-manager/macos/selenium-manager

Resource

macos-20240711.1-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Phoenix/selenium-manager/windows/selenium-manager.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Phoenix/selenium-manager/windows/selenium-manager.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Phoenix/token.txt

Resource

win7-20240705-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Phoenix/token.txt

Resource

win10v2004-20240709-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

Phoenix/ICSharpCode.SharpZipLib.dll
Size

243KB
MD5

4fe179ef90fa134b8e564ab7ff9bd903
SHA1

350090780710aa3448e2bd3b814eedefcc6026a5
SHA256

d35291416c0b7dec5232486b26406f4d02da190ca8237b53542d20f24135eac7
SHA512

321092782a5ddc78b3cd1b5395ae8818e0cfab762b48f0fcd9bde4b1ab9c40b374d3a910efe67e6fead3b7aecf378055c7feb97e3c8198f83a13bd6612a23411
SSDEEP

6144:6Po8JC1HXfrusPX/qQCSdAFRLtaMimzXo0f:69C13fr1v/qO6yiXo

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Phoenix\ICSharpCode.SharpZipLib.dll,#1
1⤵
PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy