Analysis
- max time kernel
93s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
15/01/2025, 12:36
General
- Target qqnal04.exe
- Size 122KB
- Sample250115-ps3f4sspbv
- SHA256 eebb47c48137f331e9e7e203763300c343a3643f88c60318667b5d525c40a058
Score
10/10
Malware Config
Extracted
Family
-
phemedrone
C2
-
https://api.telegram.org/bot7105371916:AAHmKYUFBY4gzPciIZ6nC4H-7mczREtwqxk/sendMessage?chat_id=8013500311
Signatures
- Phemedrone
An information and wallet stealer written in C#.
- Phemedrone family
Processes
-
C:\Users\Admin\AppData\Local\Temp\qqnal04.exe"C:\Users\Admin\AppData\Local\Temp\qqnal04.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3260-0-0x00007FFF703D3000-0x00007FFF703D5000-memory.dmp
memory/3260-1-0x00000273A8140000-0x00000273A8164000-memory.dmp