Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    07-01-2025 17:34

General

  • Target

    JaffaCakes118_704b704832380db72baeec03fea84222.exe

  • Size

    546KB

  • MD5

    704b704832380db72baeec03fea84222

  • SHA1

    8a5dd3186fda55087456901dd7204f01f8773271

  • SHA256

    37ccef8cf6bc9440f35b33c139a05bd6229f0f4b40e85e857ff6d4acc74fc7f5

  • SHA512

    92a3c807123ee1a09f7eaca90a3f0267cbded4ba426432f4833808940813b277912abed1f59e693740d94b54efb0ccca116d2e20d3fbdb29e764935eb4cdebc9

  • SSDEEP

    12288:aWWzIRlRn2/rw7INjVGCXZq0iiIxT75TQdIJWjI0g0A8W2qr4d:aWUWrnIrw7I1VGCXZbiiSQdAWngR87

Score
10/10

Malware Config

Signatures

  • PhoenixStealer

    PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

  • Phoenixstealer family

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_704b704832380db72baeec03fea84222.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_704b704832380db72baeec03fea84222.exe"
    1⤵
      PID:776

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads