Analysis
-
max time kernel
94s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
08-11-2024 19:02
General
-
Target
system.exe
-
Size
128KB
-
MD5
71f0c1101306ebd89735b734b500fe10
-
SHA1
398028832a41b64f1f1b0e865a3cccb922350fb2
-
SHA256
246f939789eb66df0dc7cb67c22ebcb8c0cfe4b0ec0f222482da9b2823e9ab32
-
SHA512
80497083cd21b2ae986c80378f30c6d3ad597a5720c776de5abc51ff732a8b566e0f7ae7f7f91c868443e17a1b60f1b0bfb54fa9eb3de37b4ab7454b6cffba25
-
SSDEEP
3072:4KkwPHTgqHc/nREvhnQ78e5S+wbDwEKT3uj9E0G:o6z5HVpQ89gEK/0
Score
10/10
Malware Config
Signatures
-
Phemedrone
An information and wallet stealer written in C#.
-
Phemedrone family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\system.exe"C:\Users\Admin\AppData\Local\Temp\system.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
152KB
-
Filesize
10.8MB
-
Filesize
10.8MB