Resubmissions

27/07/2025, 09:00

250727-kyfr3shk6x10

26/03/2025, 02:33

250326-c2dg5awvfv7

15/03/2025, 22:04

250315-1y1p9aylv87

General

  • Target
    PHANTOM X.exe
  • Size 73.9MB
  • Sample250326-c2dg5awvfv
  • SHA256 b8d1c0436023bf58ea7b0f530ea37ae67bac0e956d9c93376702b4832055e0fd
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      PHANTOM X.exe
    • Size 73.9MB
    • SHA256 b8d1c0436023bf58ea7b0f530ea37ae67bac0e956d9c93376702b4832055e0fd
    • MD5 SHA1 SHA512 SSDEEP
    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks