Analysis
-
max time kernel
133s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
31-08-2024 06:11
General
-
Target
43b21e60d088a3eba1b23f5aac9deb39d86f27a819a2e179a7edbdfd407264af.exe
-
Size
546KB
-
MD5
c9c937d7791010e40713bf9c7812a532
-
SHA1
2d09ec0b24b7eb281d5e37ad3cf3fd9fe9336615
-
SHA256
43b21e60d088a3eba1b23f5aac9deb39d86f27a819a2e179a7edbdfd407264af
-
SHA512
2afc3e89b8bdbd2dd280802bb73d11fb5a4d41b6100ae6c1bc61aa099f3387c91068b9478c4888800e4fde6e70cc43bebd258b33e4b09809b3f1c103a0fc132f
-
SSDEEP
12288:aWWzIRlRn2/rw7INjVGCXZq0iiIxTp5TQdIJWjI0g0A8Hcqr4d:aWUWrnIrw7I1VGCXZbiiEQdAWngR8k
Score
10/10
Malware Config
Signatures
-
PhoenixStealer
PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\43b21e60d088a3eba1b23f5aac9deb39d86f27a819a2e179a7edbdfd407264af.exe"C:\Users\Admin\AppData\Local\Temp\43b21e60d088a3eba1b23f5aac9deb39d86f27a819a2e179a7edbdfd407264af.exe"1⤵
- System Location Discovery: System Language Discovery