Overview
overview
7Static
static
3PhoenixSui...md.dll
windows10-2004-x64
3PhoenixSui...pe.dll
windows10-2004-x64
3PhoenixSui...pi.dll
windows10-2004-x64
3PhoenixSui...pi.dll
windows10-2004-x64
3PhoenixSui...or.dll
windows10-2004-x64
3PhoenixSui...un.dll
windows10-2004-x64
3PhoenixSui...ig.dll
windows10-2004-x64
3PhoenixSui...st.exe
windows10-2004-x64
4PhoenixSui...64.exe
windows10-2004-x64
4PhoenixSui...09.dll
windows10-2004-x64
1PhoenixSui...09.dll
windows10-2004-x64
1PhoenixSui...r2.dll
windows10-2004-x64
1PhoenixSui...09.dll
windows10-2004-x64
3PhoenixSui...09.dll
windows10-2004-x64
3PhoenixSui...r2.dll
windows10-2004-x64
3PhoenixSui...rv.sys
windows10-2004-x64
1PhoenixSui...64.sys
windows10-2004-x64
1PhoenixSui...se.url
windows10-2004-x64
1PhoenixSui...de.dll
windows10-2004-x64
3PhoenixSui...32.dll
windows10-2004-x64
3PhoenixSui...64.dll
windows10-2004-x64
3PhoenixSui...rv.exe
windows10-2004-x64
3PhoenixSui...de.dll
windows10-2004-x64
3PhoenixSui...lg.dll
windows10-2004-x64
3PhoenixSui...Ex.dll
windows10-2004-x64
3PhoenixSui...on.url
windows10-2004-x64
1PhoenixSui...oc.dll
windows10-2004-x64
3PhoenixSui...on.exe
windows10-2004-x64
3PhoenixSui...ll.exe
windows10-2004-x64
4PhoenixSui...ll.exe
windows10-2004-x64
4PhoenixSui...it.exe
windows10-2004-x64
7PhoenixSui...lf.dll
windows10-2004-x64
3Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/05/2026, 04:33
Static task
static1
Behavioral task
behavioral1
Sample
PhoenixSuit_V1.10/ACmd.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PhoenixSuit_V1.10/APipe.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
PhoenixSuit_V1.10/AdbWinApi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
PhoenixSuit_V1.10/AdbWinUsbApi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
PhoenixSuit_V1.10/AwPluginVector.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PhoenixSuit_V1.10/CommonFun.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
PhoenixSuit_V1.10/Config.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
PhoenixSuit_V1.10/DPInst.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
PhoenixSuit_V1.10/DPInst64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/amd64/WUDFUpdate_01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/amd64/WdfCoInstaller01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/amd64/winusbcoinstaller2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/i386/WUDFUpdate_01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/i386/WdfCoInstaller01009.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
PhoenixSuit_V1.10/Drivers/ADB_Driver/i386/winusbcoinstaller2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
PhoenixSuit_V1.10/Drivers/AW_Driver/usbdrv.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
PhoenixSuit_V1.10/Drivers/AW_Driver/usbdrv_AMD64.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
PhoenixSuit_V1.10/How to Use.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
PhoenixSuit_V1.10/ImgDecode.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
PhoenixSuit_V1.10/ImgDecode32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
PhoenixSuit_V1.10/ImgDecode64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
PhoenixSuit_V1.10/InstallUSBDrv.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
PhoenixSuit_V1.10/KSDecode.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
PhoenixSuit_V1.10/LangPlg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
PhoenixSuit_V1.10/LangPlgEx.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
PhoenixSuit_V1.10/Latest Version.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
PhoenixSuit_V1.10/LiveProc.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
PhoenixSuit_V1.10/PhoenixDaemon.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
PhoenixSuit_V1.10/PhoenixDrvInstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
PhoenixSuit_V1.10/PhoenixInstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
PhoenixSuit_V1.10/PhoenixSuit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
PhoenixSuit_V1.10/Phoenix_Elf.dll
Resource
win10v2004-20260513-en
General
- Target PhoenixSuit_V1.10/DPInst.exe
- Size 539KB
- Sample260530-e6jk2sdz8t
- SHA256 0af038b08f84604d2805202b5429210c5ef37f23623b8dae2bd8921e4e76a0c8
- MD5 3fd16c1cca83d9f0e91fccfe32d812d0
- SHA1 e1cb7d9b8f73afc2602c74cdea3f91773b98841d
- SHA512 e0505a0aec5e404877a917d1ac2ca436cf045549509a7654185143cdbfde7d774a5333b4385883d154d538d88e60de9bd43b65577d057fe1a567db0af120804b
- SSDEEP 6144:jZQaKSpwmx5ATm/LC3fwf3OoU9xkYSr/mdBTRhKWIUmPkr+LyIQjNW:jZqSpwmxvL/f3vCNkPkrAyIQjw
- TLSH T1C3C40621EADB8139FCF22ABD587D52210A75BCA15F70C6CF67840A6D59F4AC18930F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\DPINST.LOG DPInst.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DPInst.exe