General
- Target PhonkSpooferCtl (1).exe
- Size 98KB
- Sample260622-pc5arsbz7t
- SHA256 1ce8624f72a5704b45fbd5832199a64452bfa44c106f8db55a7a568a3c7a012b
- MD5 bc22599f645fbfd49e24e34199ae4e62
- SHA1 2958f64c93112edb9f442318c0c9d53a5367b220
- SHA512 33480d9a68cbb4eda718d586a2021572ce4489201a0a4d269f692dbe184066e04a541f3a18b6ba6db89e7d9a78522598e40214ff5f16841eeeae031a0bb36dda
- SSDEEP 1536:RHLEgNQpPK9KpXvDqfDWLzbt85sQ0DOiL/HOLctLEj:NLBNsPK9SXLyWLSn0DxL/HOQtLEj
- TLSH T1EFA32A14999990BEE679D938DE539912EF323C4A8B50B7DF07904C9A1FB0A90DF7D302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PhonkSpooferCtl (1).exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
PhonkSpooferCtl (1).exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target PhonkSpooferCtl (1).exe
- Size 98KB
- SHA256 1ce8624f72a5704b45fbd5832199a64452bfa44c106f8db55a7a568a3c7a012b
- MD5 bc22599f645fbfd49e24e34199ae4e62
- SHA1 2958f64c93112edb9f442318c0c9d53a5367b220
- SHA512 33480d9a68cbb4eda718d586a2021572ce4489201a0a4d269f692dbe184066e04a541f3a18b6ba6db89e7d9a78522598e40214ff5f16841eeeae031a0bb36dda
- SSDEEP 1536:RHLEgNQpPK9KpXvDqfDWLzbt85sQ0DOiL/HOLctLEj:NLBNsPK9SXLyWLSn0DxL/HOQtLEj
- TLSH T1EFA32A14999990BEE679D938DE539912EF323C4A8B50B7DF07904C9A1FB0A90DF7D302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.