Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
05-01-2025 23:45
General
-
Target
JaffaCakes118_021ea7b7bf8861bd0dedfd6c93f36870.exe
-
Size
546KB
-
MD5
021ea7b7bf8861bd0dedfd6c93f36870
-
SHA1
3065009a77336459b6ee33c85911d39bbec5cca1
-
SHA256
610f2955234ded50bd35c426f36b4dea3c2f1d45999c93753c6b73c94e77919b
-
SHA512
4419f60f41a33b64f7b4914e5d0199f35bf3338c4446095460b1a15959636941ba508e8851ec53172f7363874f4522580ecbc8546d4d8f446219de93f1b5ae71
-
SSDEEP
12288:aWWzIRlRn2/rw7INjVGCXZq0iiIxTV5TQdIJWjI0g0A8pQqr4d:aWUWrnIrw7I1VGCXZbiikQdAWngR8q
Score
10/10
Malware Config
Signatures
-
PhoenixStealer
PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.
-
Phoenixstealer family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_021ea7b7bf8861bd0dedfd6c93f36870.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_021ea7b7bf8861bd0dedfd6c93f36870.exe"1⤵
- System Location Discovery: System Language Discovery