General
- Target PHANTOM X.exe
- Size 73.9MB
- Sample250326-c2dg5awvfv
- SHA256 b8d1c0436023bf58ea7b0f530ea37ae67bac0e956d9c93376702b4832055e0fd
- MD5 362a25bd018488ba37da1871e404b78b
- SHA1 89b3c64dab355d6199d2ffce37890845119b4a48
- SHA512 13d9b23969d3b5bbf9dd0fbf80ca64269fc2ecded96483775e1689cde1102bd3f49579fab12beabaf458fa4733431dea2c0524e80c8e4bb2282836bb94e3b371
- SSDEEP 1572864:P7g1/IKcjPEhqKVZVd1AEJ5Rh1+BDDy4gds8KN2BAW+eHF2qHWB75ildLRufxktx:PcfjVd1AY5bADDxgds8312qHO5inL8f9
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
PHANTOM X.exe
Resource
win7-20241023-en
2 signatures
60 seconds
Behavioral task
behavioral2
Sample
PHANTOM X.exe
Resource
win10v2004-20250314-en
18 signatures
60 seconds
Malware Config
Targets
-
- Target PHANTOM X.exe
- Size 73.9MB
- SHA256 b8d1c0436023bf58ea7b0f530ea37ae67bac0e956d9c93376702b4832055e0fd
- MD5 362a25bd018488ba37da1871e404b78b
- SHA1 89b3c64dab355d6199d2ffce37890845119b4a48
- SHA512 13d9b23969d3b5bbf9dd0fbf80ca64269fc2ecded96483775e1689cde1102bd3f49579fab12beabaf458fa4733431dea2c0524e80c8e4bb2282836bb94e3b371
- SSDEEP 1572864:P7g1/IKcjPEhqKVZVd1AEJ5Rh1+BDDy4gds8KN2BAW+eHF2qHWB75ildLRufxktx:PcfjVd1AY5bADDxgds8312qHO5inL8f9
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Drops startup file
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.