3816c836b3af21fcc7f05a71ad13b17aaa110be1ecee68aa18c22bf9729bca48

Login
Reports

Overview

overview

Static

static

Phxnt0m-ma...nux.sh

ubuntu-18.04-amd64

Phxnt0m-ma...nux.sh

debian-9-armhf

Phxnt0m-ma...nux.sh

debian-9-mips

Phxnt0m-ma...nux.sh

debian-9-mipsel

Phxnt0m-ma...0m.bat

windows7-x64

Phxnt0m-ma...0m.bat

windows10-2004-x64

Phxnt0m-ma...der.py

windows7-x64

Phxnt0m-ma...der.py

windows10-2004-x64

Phxnt0m-ma...ler.py

windows7-x64

Phxnt0m-ma...ler.py

windows10-2004-x64

Phxnt0m-ma...11.pyc

windows7-x64

Phxnt0m-ma...11.pyc

windows10-2004-x64

Phxnt0m-ma...11.pyc

windows7-x64

Phxnt0m-ma...11.pyc

windows10-2004-x64

Phxnt0m-ma...ber.py

windows7-x64

Phxnt0m-ma...ber.py

windows10-2004-x64

Phxnt0m-ma...ies.py

windows7-x64

Phxnt0m-ma...ies.py

windows10-2004-x64

Phxnt0m-ma...64.dll

windows7-x64

Phxnt0m-ma...64.dll

windows10-2004-x64

Phxnt0m-ma...isc.py

windows7-x64

Phxnt0m-ma...isc.py

windows10-2004-x64

Phxnt0m-ma...ber.py

windows7-x64

Phxnt0m-ma...ber.py

windows10-2004-x64

Phxnt0m-ma...ons.py

windows7-x64

Phxnt0m-ma...ons.py

windows10-2004-x64

Phxnt0m-ma...rol.py

windows7-x64

Phxnt0m-ma...rol.py

windows10-2004-x64

Phxnt0m-ma...put.py

windows7-x64

Phxnt0m-ma...put.py

windows10-2004-x64

Phxnt0m-ma...sod.py

windows7-x64

Phxnt0m-ma...sod.py

windows10-2004-x64

Analysis

max time kernel
1s
platform
debian-9_armhf
resource
debian9-armhf-20240729-en
resource tags

arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
30/07/2024, 01:26

Sharing

Copy URL Twitter E-mail

Static task

static1

6 signatures

Behavioral task

behavioral1

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/Phxnt0m-linux.sh

Resource

ubuntu1804-amd64-20240611-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/Phxnt0m-linux.sh

Resource

debian9-armhf-20240729-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/Phxnt0m-linux.sh

Resource

debian9-mipsbe-20240611-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/Phxnt0m-linux.sh

Resource

debian9-mipsel-20240226-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/Phxnt0m.bat

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/Phxnt0m.bat

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/builder.py

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral8

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/builder.py

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/compiler.py

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/compiler.py

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/__pycache__/discord_token_grabber.cpython-311.pyc

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral12

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/__pycache__/discord_token_grabber.cpython-311.pyc

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/__pycache__/protections.cpython-311.pyc

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral14

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/__pycache__/protections.cpython-311.pyc

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/discord_token_grabber.py

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral16

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/discord_token_grabber.py

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/get_cookies.py

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral18

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/get_cookies.py

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/libopus-0.x64.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/libopus-0.x64.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/misc.py

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral22

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/misc.py

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/passwords_grabber.py

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/passwords_grabber.py

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/protections.py

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral26

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/protections.py

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/source_code/audio_control.py

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral28

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/source_code/audio_control.py

Resource

win10v2004-20240704-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/source_code/block_input.py

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral30

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/source_code/block_input.py

Resource

win10v2004-20240729-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/source_code/bsod.py

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

Phxnt0m-malware-main/Phxnt0mware RAT - main/resources/source_code/bsod.py

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target
Phxnt0m-malware-main/Phxnt0mware RAT - main/Phxnt0m-linux.sh
Size 5KB
Sample240730-btql2s1bmp
SHA256 c0eca671a36668a9f53b221ba1c96f28d879d0c36931d3d01df75f6b40f753ff
MD5 371121f4ce94ddaddc31bc515acc3711
SHA1 5f0f63683a1c7c2163410213c0f5b4b10aba5cb3
SHA512 809b242431ab3235c5c2f787ddfdf7e7bbec140f6bcb14bd2ab168c74a06e7d3137767f1410dc670f794fd058063fe002dd6f297165d5c10883ff9503b10cc93
SSDEEP 96:dRnU5upT22O4adoJKHKL0kKEcipK9pmDEKvaoGBlooYsvz5m/iRfA:dDTs4UoN0ODRaoGBlooYIz5m/itA
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

/tmp/Phxnt0m-malware-main/Phxnt0mware RAT - main/Phxnt0m-linux.sh
"/tmp/Phxnt0m-malware-main/Phxnt0mware RAT - main/Phxnt0m-linux.sh"
1⤵
PID:679
- /usr/bin/whoami
  whoami
  2⤵
  PID:685

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads