Overview

overview

9

Static

static

9

PhoenixMin...ws.zip

windows11-21h2-x64

3

PhoenixMin...ol.bat

windows11-21h2-x64

5

PhoenixMin...ty.bat

windows11-21h2-x64

5

PhoenixMin...sh.bat

windows11-21h2-x64

5

PhoenixMin...in.bat

windows11-21h2-x64

5

PhoenixMin...ol.bat

windows11-21h2-x64

5

PhoenixMin...ol.bat

windows11-21h2-x64

5

PhoenixMin...ub.bat

windows11-21h2-x64

5

PhoenixMin...ne.bat

windows11-21h2-x64

5

PhoenixMin...sk.bat

windows11-21h2-x64

5

PhoenixMin...ne.bat

windows11-21h2-x64

5

PhoenixMin...ol.bat

windows11-21h2-x64

5

PhoenixMin...on.bat

windows11-21h2-x64

5

PhoenixMin...ne.bat

windows11-21h2-x64

5

PhoenixMin...ol.bat

windows11-21h2-x64

5

PhoenixMin...cd.bat

windows11-21h2-x64

5

PhoenixMin...ol.bat

windows11-21h2-x64

5

PhoenixMin...rs.bat

windows11-21h2-x64

5

PhoenixMin...IO.dll

windows11-21h2-x64

3

PhoenixMin...IO.exe

windows11-21h2-x64

8

PhoenixMin...me.txt

windows11-21h2-x64

3

PhoenixMin...es.txt

windows11-21h2-x64

3

PhoenixMin...ig.txt

windows11-21h2-x64

3

PhoenixMin...ic.css

windows11-21h2-x64

3

PhoenixMin...ly.css

windows11-21h2-x64

3

PhoenixMin...le.png

windows11-21h2-x64

3

PhoenixMin...nt.ttf

windows11-21h2-x64

3

PhoenixMin...us.png

windows11-21h2-x64

3

PhoenixMin...us.png

windows11-21h2-x64

3

PhoenixMin...ts.css

windows11-21h2-x64

3

PhoenixMin...ls.txt

windows11-21h2-x64

3

PhoenixMin...ls.txt

windows11-21h2-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PhoenixMiner_6.2c_Windows.zip

  • Size

    5.3MB

  • Sample

    240910-jhq3faserr

  • MD5

    c90c586712ba8196c3471db532c139b8

  • SHA1

    b62bb4774de51b97978bd389dd284e4d636ed950

  • SHA256

    e4606439b649d4635746c9a408e78492759398c12b952df2574ca871740002ad

  • SHA512

    08cf479aa03fc53d698b7ad703f9e09a5ccd57885cd6613526f9d0b7166bd4fddb380ad03be870cae61e9be41894c9cf7b1dd936fd99a1c4f68e01df6077553f

  • SSDEEP

    98304:5+WELtwI+x88/G6/bv2CK4Xo7/qnuu86CESMcgNfXTm9j7jXPjPgxm22YaVI:5+WDIgHO6/bvlkXuHylc7mpExm22YaI

Score
9/10
discoveryminer

Malware Config

Targets

    • Target

      PhoenixMiner_6.2c_Windows.zip

    • Size

      5.3MB

    • MD5

      c90c586712ba8196c3471db532c139b8

    • SHA1

      b62bb4774de51b97978bd389dd284e4d636ed950

    • SHA256

      e4606439b649d4635746c9a408e78492759398c12b952df2574ca871740002ad

    • SHA512

      08cf479aa03fc53d698b7ad703f9e09a5ccd57885cd6613526f9d0b7166bd4fddb380ad03be870cae61e9be41894c9cf7b1dd936fd99a1c4f68e01df6077553f

    • SSDEEP

      98304:5+WELtwI+x88/G6/bv2CK4Xo7/qnuu86CESMcgNfXTm9j7jXPjPgxm22YaVI:5+WDIgHO6/bvlkXuHylc7mpExm22YaI

    Score
    3/10
    discovery
    behavioral1

    • Target

      PhoenixMiner_6.2c_Windows/10_ethereum-classic-crazypool.bat

    • Size

      251B

    • MD5

      5f9ddd15f6f2bc85324526714befbcb1

    • SHA1

      13c6bea4bc9c54cf812a1fcd10d2787945c6291f

    • SHA256

      fd2c215228870423ad0c13dfe8a155a5e2e37ad915b5cca76904d7b982beefa2

    • SHA512

      7857126426c03fdc86e3ba6c7e88bf02ccdac03d92c32d72e8a264e7dc0db0ba13021ccf4822088c3deb53e939c6dc3ef42f71c89089c028974f4fbb91b1d62d

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral2

    • Target

      PhoenixMiner_6.2c_Windows/11_ethereum-classic-hashcity.bat

    • Size

      191B

    • MD5

      783155807c03c338ce75e887d852e3f6

    • SHA1

      5dd872635b03eca5182fea0f3c53dd983e69aa43

    • SHA256

      86875ddebe3ab71658e957a7ae1d9b0ed1d0046e882012fcab181b7f434df0c6

    • SHA512

      f1b96d080a04c4150fffbb33a73c526628b8ad9b5474b919b238999be037b77fe6ea408d636e5886fcb01c86a52c9f1da32825d13ae17ce351d4aefd258abd49

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral3

    • Target

      PhoenixMiner_6.2c_Windows/12_ethereum-classic-nicehash.bat

    • Size

      227B

    • MD5

      de242f1f5fbe88828505433d5d54f56b

    • SHA1

      5da7e06b46faebc39f92f2c095f6d0739d19fc4e

    • SHA256

      75102ea4f21f5679e9b426cfb749d8320acccd2c6751cb0ad6bf8819ab4401a9

    • SHA512

      5f0d666867812a068fd37507ed5eed4276803343d69e7fd57146e7cadbed4080a056d2bd98a6fe6c02cd9f3d5bf2ffe6c332ac06aa8576634b15add8603b5091

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral4

    • Target

      PhoenixMiner_6.2c_Windows/13_ethereum-classic-poolin.bat

    • Size

      488B

    • MD5

      cf473c4171120c7ebba8a9b79d925c71

    • SHA1

      3691717ed9088900cdac7596cdbc8f5afb3701c6

    • SHA256

      e17ac45ec4710710f339e12727842439a9f9c175db3ed86eb7b3a1cd1edbaf8c

    • SHA512

      8ca815d8673da10f50ff1e6f7381989a50d55eaf59ab1ff5105adb154975ad8813f141afb07d41859328932829e68d16260dd6888af7704e4ace2fa75d8f735e

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral5

    • Target

      PhoenixMiner_6.2c_Windows/1_Ethereum-classic-f2pool.bat

    • Size

      182B

    • MD5

      d4d22289124f55b9db1169fdbb7647bb

    • SHA1

      1064cdb8ae28bb6aed8ea955d4ffd9bd64031602

    • SHA256

      d1e061e1c9ae4b266607b2fd1d338f894f771aadf49ec426016d241d19441f5f

    • SHA512

      6d471094b0df84fbf07f6ac81901c9ae499a963b52fca3ba3f852ad9688d42a01d4a9f679e3bd22a04045327f825d67e994b7c6ddc70647fa55eb0aa6fa47276

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral6

    • Target

      PhoenixMiner_6.2c_Windows/1_ethereum-classic-nanopool.bat

    • Size

      226B

    • MD5

      5b462bbb2f3f7a9aabf68f1d41a17456

    • SHA1

      7ef7ba37a8bd62b828e033257a0cee5ae52759f8

    • SHA256

      cc9f16c5210bce3134863575af79f136f1a4b981bfea60ee59b5dd1382377c8e

    • SHA512

      9972673b538fa536dffcc67f2463f16afbe6f59d51723009981a77b9d020f8f3d99724144c06510a8dac80f299daddf375b3a09b81f1a4ab90bb39a3d243f66d

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral7

    • Target

      PhoenixMiner_6.2c_Windows/3_ethereum-classic-miningpoolhub.bat

    • Size

      214B

    • MD5

      6d4396bd7419fbe456f0e6152ead88c7

    • SHA1

      6ecee865ed1d373dc92f3fa1f5ad50f79654c73c

    • SHA256

      b30765776a2e125edf2fbf0ed53cf07f71beb3477a7e97ed6fd14412731f2b5c

    • SHA512

      5dc9a79e1928a4832586c86733712ea15b3c30f6c716b7cdd3c40db00f7fe090880f53b5f5ff6a1b52c77e97f6f0b0ae674ac0e5589bc4b4741b7cb3ed9e5d8c

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral8

    • Target

      PhoenixMiner_6.2c_Windows/42_ethw-ethwmine.bat

    • Size

      178B

    • MD5

      8a164db026926e30f9be9b2d61c3d9ca

    • SHA1

      a03d41ff170135f56c09ee4f99fe0cbc8fea77bd

    • SHA256

      ccf2495c4af42c3e8af54903f50bc37df4175e2151f8e0aaf3668ff917508695

    • SHA512

      37cb933c55b85978a58862b2ab1670ca53cde473b47d24718e591bd561c7a3bf3fe2d884a85b495537476d65f6abb1446156f583b642ddd7bd9c76983aaf8dc7

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral9

    • Target

      PhoenixMiner_6.2c_Windows/42_ethw-pool-msk.bat

    • Size

      188B

    • MD5

      cb2a97edb01bdcd91e3948e7efcd2726

    • SHA1

      cbd1ad0aaa92eed1198b104ee1621b0a59a652b8

    • SHA256

      b76e877d6580c8436cece9b24adfd8e2b1992307df83ef1d7ec4c2148f9c1cdc

    • SHA512

      8acffa3c59b113c9eb022263879c491fd562ca33d3e5b0e937ef944386481592d180a63cdfee3284d5a75295f0c5308facac467cd07f6eb05c48a8054d8c0c18

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral10

    • Target

      PhoenixMiner_6.2c_Windows/4_ethereum-classic-ethermine.bat

    • Size

      226B

    • MD5

      5154b80655f67280d38edc8a2472d4ad

    • SHA1

      d14f42125ffa76bbe40c5165eb1589741473e3f1

    • SHA256

      6d7bde49f7860cd73c2f465d198b1430aa4de6d4a95d86e7c76a4e476868428c

    • SHA512

      36979ad1d936cbc89875ed90f90fc25fc7f1a60308f16100835f7678187d9b408923eed7de32318194d0158d453d7cff9abcf54e2862129854632766be11f25c

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral11

    • Target

      PhoenixMiner_6.2c_Windows/5_Ethereum-classic-antpool.bat

    • Size

      195B

    • MD5

      c531617dc5b4cd6dddeb83d756b3e78d

    • SHA1

      63bb53dc6a398bb88f1ad9a04eb53a6f08c533a1

    • SHA256

      77b81c23860a0f58b606bd5de29a8318cb556ec15e18446095b9e923bbfd5747

    • SHA512

      5d370e1148ea2ac4b44743fdbc236d37a17d7cb11ac8bb9b49ca1526c0d7af349382a63d4cfd16a809c38cded39c2d427a73fa6afc44dba9b6de83551db683c4

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral12

    • Target

      PhoenixMiner_6.2c_Windows/6_Ethereum-classic-hiveon.bat

    • Size

      220B

    • MD5

      2b8e3174df0e5f705ddc6cfbb54d7ff2

    • SHA1

      5ff9410dfb3215fec13b57c89146055f612912a0

    • SHA256

      a3d2ec8d5863fee04e61e419a2ae0763c644f8c0ca32e618d06530ae0127d110

    • SHA512

      0f0ac058ec4a6c73fbd8dfe7f4330158a539f4d2547f45713b3e58024de6a8a6df93b87e4de8590cb03e591c3e1b3d25d33393eae52c85a270fc7e622b9925e6

    Score
    5/10
    discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral13

    • Target

      PhoenixMiner_6.2c_Windows/7_ethereum-classic-coinmine.bat

    • Size

      193B

    • MD5

      eed59cea5c63728968b69ab334637d6d

    • SHA1

      0cb14b4b74501732a1a497cb54c336cfb61d14bb

    • SHA256

      57218ba71a6e6c8749a5b40349736697d4599221eec7545e2d070e9adc7989b4

    • SHA512

      e8a256f8eb8f46dd33f11c7bf5136918aa6cf340db53489b5ccd4af8280fc4af019154e7bbb015b82aae27b8d14289f4a188e31290a9629bb297c0c6a9257e73

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral14

    • Target

      PhoenixMiner_6.2c_Windows/8_ethereum-classic-beepool.bat

    • Size

      232B

    • MD5

      505e9020adecd409e6cad8f40d2b2e2d

    • SHA1

      9905ae476725e8984b36ea65882a098f6dc4acd8

    • SHA256

      44c6d522a25d560e4c57cffa1d57f18a09ba52735290c88dbd89b197db8996d3

    • SHA512

      d2ac8d06a5c97cac87e18ca1ccf15124e7dca161f5295e2724e1c04c6c09f3d67875abcf6a2ec2a266bd06e08e9b44da6d50570a733d6163799b5f43ce7c98cb

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral15

    • Target

      PhoenixMiner_6.2c_Windows/9_ethereum-classic-emcd.bat

    • Size

      188B

    • MD5

      8d9dba2e8ed201bbbed59824bea99c94

    • SHA1

      8132aae0aec251a499c98d4e36a12c24e0e2ff54

    • SHA256

      538f8628a5ccf79ff48d3c5af69a2fad1272f8580b0e6fd6cb7955af5f4d9770

    • SHA512

      84ded397ada9a7790d4bd8b20e730fc53d24077febc6d25040b1630634b803a0d49d8dd22053e843bb675d896082a4e86a4f3d0af32981748aa70c0d4840004d

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral16

    • Target

      PhoenixMiner_6.2c_Windows/Akroma-zergpool.bat

    • Size

      236B

    • MD5

      f6cc429f4781255d2905ef98422529b2

    • SHA1

      52a312a8298f89f990f886755c3d2c79a7c6350e

    • SHA256

      ade27234955b1d886112047bd8cbbd78d6204465698b6c2846c704eafd894caf

    • SHA512

      ab6763f8d1e098d0da4c097591f03afea022496a9fc24cf7b621fac2bfb4ea295191dfcf6d0f138a47c954969d6da5cbd2459abd8f43edab434f6f4a7c9dfe1a

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral17

    • Target

      PhoenixMiner_6.2c_Windows/Calisto-2miners.bat

    • Size

      220B

    • MD5

      5d24b64f783df3a53b1f95461f8ac01c

    • SHA1

      d3e382488264f404ea95bd6fdd9c61dafc63ffcb

    • SHA256

      715de7f53bc3a297e1427b9d58f92e245522cc27cab084592efc76f198800910

    • SHA512

      703fc69e0e87d666cce3c1324f277849f0736cfd799afd7d85e8d1ff4a4dbccdb6b964f17f1e7d03586212e9db816e06e1b85150b678209bf9446ef5f370eae1

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral18

    • Target

      PhoenixMiner_6.2c_Windows/EIO.dll

    • Size

      96KB

    • MD5

      535d726e60039ab367310081ba9dc8ff

    • SHA1

      6dc4a9a58119472b986d896e8e367c7e4bf99477

    • SHA256

      287e44f5067a4e770e8a0605f5720d3d1477ecc4aa4f3a26ce5d3a489ae79780

    • SHA512

      0d8597b79a2615059f0bdd1fd0c2207b0bd96dac29b27af5f6af1bfbf003ceeed984a7bad54e2c917ffb5d9738229a8c0d52972c4caf69e353406c2068c000fd

    • SSDEEP

      1536:yiDenbEKUOwiy0nTo4XRkdpJRfor9hVoc3/4q3fQdPgI:yCKVwixedpJRfor9hVoc3gq3fQNgI

    Score
    3/10
    discovery
    behavioral19

    • Target

      PhoenixMiner_6.2c_Windows/EIO.exe

    • Size

      95KB

    • MD5

      2d9d28d2c05d9057fb3d6549230a7f40

    • SHA1

      8cda60ac00bc66ef05bb9d96e18206d34ce46b11

    • SHA256

      402438684406d1e3b2d1d5629151259ad864ffc55c8e6ab176f4c47c543d4fee

    • SHA512

      60a230568445bcbfc9c638cb672d55b79febeede23b64620cf5a8a32b6ae6a78dc7878dc95d6a5008cfffec5a6ad47c6e48ea8321887e2f19eeff3bcf7436194

    • SSDEEP

      1536:SSskGxmK12TPv62maXhegtLe3/bm1uYv8DckuC/BOYJwLsWCNecd7GsBSV6M7Wq+:614PTfhntLW/b6uoucJsws5CzV6m1

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    behavioral20

    • Target

      PhoenixMiner_6.2c_Windows/Readme.txt

    • Size

      51KB

    • MD5

      859fcad14ab0ae20b2cd5f2bcbf45cec

    • SHA1

      4e514159c6df8396ea1c19d095f3aa03e9c67f54

    • SHA256

      7e017c23836e47cf0c5862f4e8762fc498f95a57a79cd506bf7b8bd92383612c

    • SHA512

      c66f20a420ef793b9413d26509f4272de03d1d9b8ec3dbb0181642d2207b286d1b23318874d15ff8d7119b6c268c8757aefb558e85c5d74f21217b7b4bea4c97

    • SSDEEP

      768:UXPsmLpqcEVk25XynkcVpeCIxpaso0MviA1yOjsPbPs/qQkDMf0hJMimg4VNrSMT:9kby7PxQPf0A7gucd465aIPe

    Score
    3/10
    behavioral21

    • Target

      PhoenixMiner_6.2c_Windows/ReleaseNotes.txt

    • Size

      42KB

    • MD5

      98810ad4ec3ec8f1bbdc7c83c787676a

    • SHA1

      4e6a8caa1b0402b4cd48246072c21c35f6eae8a9

    • SHA256

      c3eec279c37602649f51b46880288e57e7d17d6c77b0a6918375f025b28af637

    • SHA512

      0462048aa77bb592c10be8adb99b7ab995b08ccffcca30be2e643f9253215f745227dda612ac62f05758de059ff0ce59be9a4bbf8e871ceed60ccd3732c438d2

    • SSDEEP

      768:uC6ILWyC8Rc6YVrc6/HXoi743sKVkwepK6UKD6JZ+GMzfi/LovByqnahDB4LyuPl:u7UC07sxzl

    Score
    3/10
    behavioral22

    • Target

      PhoenixMiner_6.2c_Windows/config.txt

    • Size

      812B

    • MD5

      7be2dbfa0ea8411903f9da88b6f32317

    • SHA1

      380db1367c6a740687368621718704a4b86107b9

    • SHA256

      bd55ec593a96825cc0f86f9d9263b1a0cdb642f07651099d4adae72107ff8833

    • SHA512

      10c6389cbec0877e2b6d1a4f46bbfed18f1338c223810784614c03dbd8819116c518deca0b6f6064c707e1eed5b319ba0c2c6fb817c06023433658579f3428bc

    Score
    3/10
    behavioral23

    • Target

      PhoenixMiner_6.2c_Windows/doc/_static/basic.css

    • Size

      12KB

    • MD5

      74959365a001bef5b1784c3028654536

    • SHA1

      8e422a7f6fd38ab9b86a3e1bc4902a2b31aefb42

    • SHA256

      47f8f2251453c98d12b2e0277aa8f7c9f4b09de6cce9ddb578dde8dad2858153

    • SHA512

      4c9307f29bf3f639349e18151e70f7f53d7f5913ef6b7a359ae16e51a451c2851f0c15ad12b6a2122d14f815d326ef5f9722d7f3e70fad39ffe8eddcd820026c

    • SSDEEP

      384:RDkgMGN4H775IIb/TOwUXSIc+Ri4Ork0wHqd5QW:wqFkrd5

    Score
    3/10
    behavioral24

    • Target

      PhoenixMiner_6.2c_Windows/doc/_static/css/badge_only.css

    • Size

      3KB

    • MD5

      73352185a4fadd4d3b6990d42aded2a7

    • SHA1

      4efb3a13f120b29a51db2d24f8b26d208b9e86ba

    • SHA256

      20c35180ca0ed324fc6ba9f896fe2b9588538b6b51885d6f73e89b2720b8dbb6

    • SHA512

      0646103e4566bc3695fcefb35d0c9d86f05832cea09b999383c37bba60dc2a87a021d6f5ca2da581c422f245fed0a13fa0b9b25c71856d5ddf2ed4fe2001e513

    Score
    3/10
    behavioral25

    • Target

      PhoenixMiner_6.2c_Windows/doc/_static/file.png

    • Size

      286B

    • MD5

      ba0c95766a77a6c598a7ca542f1db738

    • SHA1

      51fd2e4ec924e822c5d434fa98ccfc70c30380f5

    • SHA256

      5c4bc9a16aebf38c4b950f59b8e501ca36495328cb9eb622218bce9064a35e3e

    • SHA512

      0426fe38986987303f6076d52ef28bdcf4f3ac2858e0780557471f2d0f3e055745687d0905357c6a0cd7e6f5dd1ef8fe82ff311e44499f89ab6299a41b67d8e6

    Score
    3/10
    behavioral26

    • Target

      PhoenixMiner_6.2c_Windows/doc/_static/fonts/fontawesome-webfont.ttf

    • Size

      161KB

    • MD5

      b06871f281fee6b241d60582ae9369b9

    • SHA1

      13b1eab65a983c7a73bc7997c479d66943f7c6cb

    • SHA256

      aa58f33f239a0fb02f5c7a6c45c043d7a9ac9a093335806694ecd6d4edc0d6a8

    • SHA512

      9ffb91e68c975172848b4bba25284678cc2c6eb4fb2d42000aa871c36656c4cebc28bf83c94df9afdfbf2407c01fe6b554c660b9b5c11af27c35acadfe6136ac

    • SSDEEP

      3072:3bhEnD+IzsU9z9QJ6/P3Xe2iEiEPGFCMW1JVJG6wVTDsk6BmG6S1yKshojskO+b2:3enD+IzsU9z9QJ6/PO2FiEP2C/DVJG6I

    Score
    3/10
    behavioral27

    • Target

      PhoenixMiner_6.2c_Windows/doc/_static/minus.png

    • Size

      90B

    • MD5

      36b1a4b05451c7acde7ced60b2f6bc21

    • SHA1

      89f4178f1f917ad03726f307fe6d2e28d6a1706a

    • SHA256

      47e7fc50db3699f1ca41ce9a2ffa202c00c5d1d5180c55f62ba859b1bd6cc008

    • SHA512

      ead39adf0cbb8bf803977f277632b42c62aaeeda8e4a57dd263aaa0851562ba27f069320b2eb29b7ed93d1682a965ecd61826bdf1cb2e15a68f08ae88ddd05cf

    Score
    3/10
    behavioral28

    • Target

      PhoenixMiner_6.2c_Windows/doc/_static/plus.png

    • Size

      90B

    • MD5

      0d7849fd4d4148b7f78cab60a087633a

    • SHA1

      365abe63de063ef2d97d3caacc43512415b5a835

    • SHA256

      54115199b96a130cba02147c47c0deb43dcc9b9f08b5162bba8642b34980ac63

    • SHA512

      5a34f6b12a015e45e5e3f785d42cf75bd6cb2850c3d0bd85fc59d8edbab0a6543a9bbdc0a8a29a7f30baf96b7780d0f87247b90b9597ed0fd265a8e50612ac4c

    Score
    3/10
    behavioral29

    • Target

      PhoenixMiner_6.2c_Windows/doc/_static/pygments.css

    • Size

      4KB

    • MD5

      aef7931044a13463a2bb487ac680bc33

    • SHA1

      5c1c272e71bc1f3b8a621f342f7b923f1051a616

    • SHA256

      e882628da450480613755e6b8e1ad7014c15e5666c758973352469990a5626de

    • SHA512

      8862dc5cde3bf1c1630c1d4dbab1c03237e61286c36d7a670511a277bba5fc928fd183e169e9c84a508d8b7f4e9c475234b6f70f12607569571a7f0a7c517a88

    • SSDEEP

      96:OQcV87VgV3VtVVsEVL/jkFs0KkVuwVI9z:5cu7aR/MEZ/aZEw4z

    Score
    3/10
    behavioral30

    • Target

      PhoenixMiner_6.2c_Windows/dpools.txt

    • Size

      115B

    • MD5

      3134d02ceacfd22eafe6b4ca39797616

    • SHA1

      17b111a4a584b23e11d10d8f1afcf40e7a159660

    • SHA256

      79a818a325b47496ae1e2f39e0bb666ecf120a4c28d1e7b89c32c8b521259f16

    • SHA512

      8c0faf48139a7b02afbb856451c76a4725d313c53234395d76a02f6d346a33502ae39c7fdc246baff6cd7c8e909c3f77e2a2039cd203bcc8916e8e081a542075

    Score
    3/10
    behavioral31

    • Target

      PhoenixMiner_6.2c_Windows/epools.txt

    • Size

      2KB

    • MD5

      fd8b593f808d31cd001ef45c563ca3b7

    • SHA1

      5f6af7c49dfefe809af77087343ad2d298d303d3

    • SHA256

      0edcd75787a50e2389adf9907f4c9ec91a8167ba9d608d36c0a771412ae918df

    • SHA512

      9d39b9d991dd05cee2a66dfa39160e3561bf9bdf01833f3559f195341636578d2311b7d4a602ccf4736cdfd4ba57e74638ae77cb17d37d7ee7e563ebf01c05ff

    Score
    3/10
    behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

1
T1217

Query Registry

1
T1012

System Information Discovery

13
T1082

System Time Discovery

1
T1124

System Location Discovery

2
T1614

System Language Discovery

2
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

miner
Score
9/10

behavioral1

discovery
Score
3/10

behavioral2

Score
5/10

behavioral3

Score
5/10

behavioral4

Score
5/10

behavioral5

Score
5/10

behavioral6

Score
5/10

behavioral7

Score
5/10

behavioral8

Score
5/10

behavioral9

Score
5/10

behavioral10

Score
5/10

behavioral11

Score
5/10

behavioral12

Score
5/10

behavioral13

discovery
Score
5/10

behavioral14

Score
5/10

behavioral15

Score
5/10

behavioral16

Score
5/10

behavioral17

Score
5/10

behavioral18

Score
5/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
8/10

behavioral21

Score
3/10

behavioral22

Score
3/10

behavioral23

Score
3/10

behavioral24

Score
3/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
3/10

behavioral28

Score
3/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
3/10

behavioral32

Score
3/10