Overview

overview

10

Static

static

3

drivers.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    drivers.exe

  • Size

    307KB

  • Sample

    240726-pd59fszhqg

  • MD5

    4028f53201134a9ce886357e569f5fab

  • SHA1

    bc97afdebdd005ccf07e017f48afaf2c8d6cad92

  • SHA256

    87f5963e12c463e17b55f438065192ebca205f3dab10a6d5f99af1af4bae777f

  • SHA512

    2190b22c2ad6ad879d76c8e50f035f2aa6c18f1a23521e92700e6208fe26c39dc0aff618640f55623332cc631ce9c3eea782dcf66f35b0cb815c943632d057f9

  • SSDEEP

    6144:dbnC5SDnkBYmgrG6Ci+cm466MnBdnVawCZkb:lCgDnkB7o4566BdktZq

Score
10/10
phemedronediscoverystealer

Malware Config

Extracted

Family

phemedrone

C2

https://api.telegram.org/bot7112551293:AAGZhRTgYJ4a8RYnU6UgUDOchJ72jMEo2t0/sendDocument

Targets

    • Target

      drivers.exe

    • Size

      307KB

    • MD5

      4028f53201134a9ce886357e569f5fab

    • SHA1

      bc97afdebdd005ccf07e017f48afaf2c8d6cad92

    • SHA256

      87f5963e12c463e17b55f438065192ebca205f3dab10a6d5f99af1af4bae777f

    • SHA512

      2190b22c2ad6ad879d76c8e50f035f2aa6c18f1a23521e92700e6208fe26c39dc0aff618640f55623332cc631ce9c3eea782dcf66f35b0cb815c943632d057f9

    • SSDEEP

      6144:dbnC5SDnkBYmgrG6Ci+cm466MnBdnVawCZkb:lCgDnkB7o4566BdktZq

    Score
    10/10
    phemedronediscoverystealer

    • Phemedrone

      An information and wallet stealer written in C#.

      stealerphemedrone

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks