Overview
overview
7Static
static
3PhoenixSui...md.dll
windows10-2004-x64
3PhoenixSui...pe.dll
windows10-2004-x64
3PhoenixSui...pi.dll
windows10-2004-x64
3PhoenixSui...pi.dll
windows10-2004-x64
3PhoenixSui...or.dll
windows10-2004-x64
3PhoenixSui...un.dll
windows10-2004-x64
3PhoenixSui...ig.dll
windows10-2004-x64
3PhoenixSui...st.exe
windows10-2004-x64
4PhoenixSui...64.exe
windows10-2004-x64
4PhoenixSui...09.dll
windows10-2004-x64
1PhoenixSui...09.dll
windows10-2004-x64
1PhoenixSui...r2.dll
windows10-2004-x64
1PhoenixSui...09.dll
windows10-2004-x64
3PhoenixSui...09.dll
windows10-2004-x64
3PhoenixSui...r2.dll
windows10-2004-x64
3PhoenixSui...rv.sys
windows10-2004-x64
1PhoenixSui...64.sys
windows10-2004-x64
1PhoenixSui...se.url
windows10-2004-x64
1PhoenixSui...de.dll
windows10-2004-x64
3PhoenixSui...32.dll
windows10-2004-x64
3PhoenixSui...64.dll
windows10-2004-x64
3PhoenixSui...rv.exe
windows10-2004-x64
3PhoenixSui...de.dll
windows10-2004-x64
3PhoenixSui...lg.dll
windows10-2004-x64
3PhoenixSui...Ex.dll
windows10-2004-x64
3PhoenixSui...on.url
windows10-2004-x64
1PhoenixSui...oc.dll
windows10-2004-x64
3PhoenixSui...on.exe
windows10-2004-x64
3PhoenixSui...ll.exe
windows10-2004-x64
4PhoenixSui...ll.exe
windows10-2004-x64
4PhoenixSui...it.exe
windows10-2004-x64
7PhoenixSui...lf.dll
windows10-2004-x64
3Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/05/2026, 04:33
Static task
static1
Behavioral task
behavioral1
Sample
PhoenixSuit_V1.10/ACmd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PhoenixSuit_V1.10/APipe.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
PhoenixSuit_V1.10/AdbWinApi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
PhoenixSuit_V1.10/AdbWinUsbApi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
PhoenixSuit_V1.10/AwPluginVector.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PhoenixSuit_V1.10/CommonFun.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
PhoenixSuit_V1.10/Config.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
PhoenixSuit_V1.10/DPInst.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
PhoenixSuit_V1.10/DPInst64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/amd64/WUDFUpdate_01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/amd64/WdfCoInstaller01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/amd64/winusbcoinstaller2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/i386/WUDFUpdate_01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/i386/WdfCoInstaller01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/i386/winusbcoinstaller2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
PhoenixSuit_V1.10/Drivers/AW_Driver/usbdrv.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
PhoenixSuit_V1.10/Drivers/AW_Driver/usbdrv_AMD64.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
PhoenixSuit_V1.10/How to Use.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
PhoenixSuit_V1.10/ImgDecode.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
PhoenixSuit_V1.10/ImgDecode32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
PhoenixSuit_V1.10/ImgDecode64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
PhoenixSuit_V1.10/InstallUSBDrv.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
PhoenixSuit_V1.10/KSDecode.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
PhoenixSuit_V1.10/LangPlg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
PhoenixSuit_V1.10/LangPlgEx.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
PhoenixSuit_V1.10/Latest Version.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
PhoenixSuit_V1.10/LiveProc.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
PhoenixSuit_V1.10/PhoenixDaemon.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
PhoenixSuit_V1.10/PhoenixDrvInstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
PhoenixSuit_V1.10/PhoenixInstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
PhoenixSuit_V1.10/PhoenixSuit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
PhoenixSuit_V1.10/Phoenix_Elf.dll
Resource
win10v2004-20260513-en
General
- Target PhoenixSuit_V1.10/PhoenixDaemon.exe
- Size 797KB
- Sample260530-e6jk2sdz8t
- SHA256 1855544bbcbcabd1e59d1b2f53bf5d336945984b2a7b248baabe9bdf43fc9dfd
- MD5 5bddcb77f55540e32326edc900bbce96
- SHA1 74d15731fa04169761fca48a381cb6e6f9071fc7
- SHA512 02df548dcf432f51278e9a7b70e90c6f27693392e347dbf9ffb39dbf4757bf1e7a7955a41b4260953bee782cbd73e74f0223af40dcae2959cf6ab1a06c81bf2b
- SSDEEP 12288:+M8NjFdrfqxmLPktF1P+OjnGEJW/dufujwktjW/rUY/AO2fJpUGpEdTLt1cBP:+MQjbT121PNjnGD/kKG/7TZqBP
- TLSH T1AD055D139441D8F7F83200F21755EBB01662C6361553DCA2B6E8E82DAF72E52BE6933D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language PhoenixDaemon.exe