Overview
overview
7Static
static
3PhoenixSui...md.dll
windows10-2004-x64
3PhoenixSui...pe.dll
windows10-2004-x64
3PhoenixSui...pi.dll
windows10-2004-x64
3PhoenixSui...pi.dll
windows10-2004-x64
3PhoenixSui...or.dll
windows10-2004-x64
3PhoenixSui...un.dll
windows10-2004-x64
3PhoenixSui...ig.dll
windows10-2004-x64
3PhoenixSui...st.exe
windows10-2004-x64
4PhoenixSui...64.exe
windows10-2004-x64
4PhoenixSui...09.dll
windows10-2004-x64
1PhoenixSui...09.dll
windows10-2004-x64
1PhoenixSui...r2.dll
windows10-2004-x64
1PhoenixSui...09.dll
windows10-2004-x64
3PhoenixSui...09.dll
windows10-2004-x64
3PhoenixSui...r2.dll
windows10-2004-x64
3PhoenixSui...rv.sys
windows10-2004-x64
1PhoenixSui...64.sys
windows10-2004-x64
1PhoenixSui...se.url
windows10-2004-x64
1PhoenixSui...de.dll
windows10-2004-x64
3PhoenixSui...32.dll
windows10-2004-x64
3PhoenixSui...64.dll
windows10-2004-x64
3PhoenixSui...rv.exe
windows10-2004-x64
3PhoenixSui...de.dll
windows10-2004-x64
3PhoenixSui...lg.dll
windows10-2004-x64
3PhoenixSui...Ex.dll
windows10-2004-x64
3PhoenixSui...on.url
windows10-2004-x64
1PhoenixSui...oc.dll
windows10-2004-x64
3PhoenixSui...on.exe
windows10-2004-x64
3PhoenixSui...ll.exe
windows10-2004-x64
4PhoenixSui...ll.exe
windows10-2004-x64
4PhoenixSui...it.exe
windows10-2004-x64
7PhoenixSui...lf.dll
windows10-2004-x64
3Analysis
- max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/05/2026, 04:33
Static task
static1
Behavioral task
behavioral1
Sample
PhoenixSuit_V1.10/ACmd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PhoenixSuit_V1.10/APipe.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
PhoenixSuit_V1.10/AdbWinApi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
PhoenixSuit_V1.10/AdbWinUsbApi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
PhoenixSuit_V1.10/AwPluginVector.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PhoenixSuit_V1.10/CommonFun.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
PhoenixSuit_V1.10/Config.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
PhoenixSuit_V1.10/DPInst.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
PhoenixSuit_V1.10/DPInst64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/amd64/WUDFUpdate_01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/amd64/WdfCoInstaller01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/amd64/winusbcoinstaller2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/i386/WUDFUpdate_01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/i386/WdfCoInstaller01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/i386/winusbcoinstaller2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
PhoenixSuit_V1.10/Drivers/AW_Driver/usbdrv.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
PhoenixSuit_V1.10/Drivers/AW_Driver/usbdrv_AMD64.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
PhoenixSuit_V1.10/How to Use.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
PhoenixSuit_V1.10/ImgDecode.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
PhoenixSuit_V1.10/ImgDecode32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
PhoenixSuit_V1.10/ImgDecode64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
PhoenixSuit_V1.10/InstallUSBDrv.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
PhoenixSuit_V1.10/KSDecode.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
PhoenixSuit_V1.10/LangPlg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
PhoenixSuit_V1.10/LangPlgEx.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
PhoenixSuit_V1.10/Latest Version.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
PhoenixSuit_V1.10/LiveProc.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
PhoenixSuit_V1.10/PhoenixDaemon.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
PhoenixSuit_V1.10/PhoenixDrvInstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
PhoenixSuit_V1.10/PhoenixInstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
PhoenixSuit_V1.10/PhoenixSuit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
PhoenixSuit_V1.10/Phoenix_Elf.dll
Resource
win10v2004-20260513-en
General
- Target PhoenixSuit_V1.10/InstallUSBDrv.exe
- Size 28KB
- Sample260530-e6jk2sdz8t
- SHA256 57806973741a96ea86aa1c20e4fea2b0860b68df2af0eaf2bb0b1e514d2a307a
- MD5 126c29b668b5aafe347e4a0f64225765
- SHA1 5db609f2af9776ffa1a92f6ebb953b0f4e52296d
- SHA512 526bd30cceb7441e3d8b7b960a0aa15034989ecf40f05e51162149b0cab0e5d901333c578b7c590fda1232ae0bcd16b3e29e65bd4968002ffcd9841aee34ac05
- SSDEEP 192:M3S+MtDPt3JH1tSGng4W/VuybR2/tnC2nLo86m4OtktX4tlBdtVrlBolr2wkrNhM:MIJK2aV9bRUwWrAldkjS/ob48U9k49F
- TLSH T17BD2A53B4D1A0F71E36CD1342C6EDA77AC7F9690B7E01AEF6258DCB481660026C6761B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InstallUSBDrv.exe