acb65f55a1644613f2fe3a75a6103ab4bf8a72a12855e0a75782beb524cfcaf8

Resubmissions

14/07/2026, 16:08

260714-tlhwcaf15j8

14/07/2026, 16:03

260714-thf8caaw5v8

Sharing

Copy URL Twitter E-mail

General

Target
phantom-loader.zip
Size 106.0MB
Sample260714-thf8caaw5v
SHA256 acb65f55a1644613f2fe3a75a6103ab4bf8a72a12855e0a75782beb524cfcaf8
MD5 41553f4aed5670ce902dc0ca269d7fe6
SHA1 9937daad91e0c37cb5f633e760d75abe99d35104
SHA512 3960ea7df0206ab6ec1444c5f113b7bf0a79e9c21d389b5d696cf6b468f51a69d9493238c15b5056cb596c94b4f31491d43dfca7861ccd5572e8dd6c774f806c
SSDEEP 3145728:6aWk/76KTOQwP8YdphFhC3qtCWLeRtX7ugafUgGFUi:6k/+KxsdphC3eCWqDy5mUi
TLSH
T18D383352EB48E71A5461FC75C4F1ABB294F6AB52EE1CD2230D2318AC2DE09D1CE71D6C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  phantom-loader.zip
- Size 106.0MB
- SHA256 acb65f55a1644613f2fe3a75a6103ab4bf8a72a12855e0a75782beb524cfcaf8
- MD5 41553f4aed5670ce902dc0ca269d7fe6
- SHA1 9937daad91e0c37cb5f633e760d75abe99d35104
- SHA512 3960ea7df0206ab6ec1444c5f113b7bf0a79e9c21d389b5d696cf6b468f51a69d9493238c15b5056cb596c94b4f31491d43dfca7861ccd5572e8dd6c774f806c
- SSDEEP 3145728:6aWk/76KTOQwP8YdphFhC3qtCWLeRtX7ugafUgGFUi:6k/+KxsdphC3eCWqDy5mUi
- TLSH
  T18D383352EB48E71A5461FC75C4F1ABB294F6AB52EE1CD2230D2318AC2DE09D1CE71D6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  phantom-loader/assets/source_4.dlm
- Size 760KB
- SHA256 f634ee8a9580829d01e9b9c684ed15bd4da67e94d7b3105b36d80ed52e4b8003
- MD5 d29ffca85e9b8295d883d4e6f17e85ec
- SHA1 80cb97300d9573d1e28de2d9d4488ce356ebaf92
- SHA512 898ada5521f24a2095bc1d05540e82dda884d9848ae61fbd45333184c5bee7a795a461b503e07ff9b5518d61a0a6afe56386ae13f87d74c46a83e2cf5882f361
- SSDEEP 12288:Cm4xYwjVBSjkNXL384XNHxD6znv4lGkkw5BYW4y4G63LSr/xRQkXonT1byD8/:CmQBSKr8eNHkznv4lGIhxT/3QTeo/
- TLSH
  T186F433DAB0C104B3B14CEF767A889394120709D4A6C47D4C1AACF0DA674FB5F67AF64A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral2
- Target
  phantom-loader/assets/source_46.002
- Size 867KB
- SHA256 5fbaaccf8aaae7f8c5a255795d3c285b1a50221fb3ede8cbccc06064297895f8
- MD5 fef7fbc7e8462e524b7b3d1dc4850fcc
- SHA1 7f26ab9a7d6b0d106b0551c7c86f91d19ba3d826
- SHA512 11caff23a999a3fcb429997afccf89c5dc98c22da57201d318bcb780bb3ee9d463c3f205987d3e19fd4585a655c12dbb716539f5793aeab3194dbef5d23d93cd
- SSDEEP 24576:wDcvZ4RHZ0XBgkT2PwsLmtfjQwZVDdYj2Q:/4RHZdQWLmt7D2iQ
- TLSH
  T1D41533BBD2E630A928EF479C9CE698F720C4B1C1EB65649EF135473C7C164A5C888372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  phantom-loader/assets/stats_110.dlm
- Size 731KB
- SHA256 c5a06c229769c4517a6b4f18a2a7f24db4d6885fbdedcdc45e2c2e6a1f27120b
- MD5 bf644e803c51d1aed04c52e59f2a65c0
- SHA1 245d190361e00c15b7fe32f452bdc6637b662eea
- SHA512 268c2bc4ef97a4f10e9c3d9051647061398881daa4d94636fa7d86443acaa2935e1246de0b7934f6a666be1b4853ca0a0927a54213838f7c9f1dbb1e651a9519
- SSDEEP 12288:7LtWIGycj/604qPvMoXHomu0JFi+o52t+9r7tadQhXcmqh7OaLp7gMi+Qd+DIK0y:t5+L4qnMbGFHwpV7nKFh6gpXd9DIK07e
- TLSH
  T1C6F4236D2461E76410F36F984829584498C18BF5FD427B5F2D7B32706E2BAC53CB12EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral4
- Target
  phantom-loader/assets/stats_35.bin
- Size 604KB
- SHA256 4625a0d3ddcb3cf95d3fc9729be3a1699b08d0587fddbab3b8e53f5c544aedd7
- MD5 db8affeb96992fc1c3a42aba81174607
- SHA1 a0716071b8d82abf38b4684d56d36f8c58399215
- SHA512 c1dd4507860dd5f1719d7c6e2afd82170d88309fcb4731cef2a8983f709dcb14cde7e73dcace349663589108bb0d922f063d3f972d8ebef561daafebd8ff1b04
- SSDEEP 12288:5QdIcKoff3NW/wck4Ia1cx5sc9eiVfRPwcVfxgVCw:5QdfW3k4IHRfRPw4Pw
- TLSH
  T15FD423B15B60A47C68C82601327AF8D2EAD9931B3165FDF6ABC1FB0514FCA9E1C947C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5
- Target
  phantom-loader/assets/stats_72.bin
- Size 616KB
- SHA256 45601e4dceba9ea0d608831c45ae7af76d2265e91cea2531e6b468e6c2ed9d36
- MD5 d191618855b0dc4cd5627e8bc0120cfd
- SHA1 ec35b5c451cd5cb3bfc7f69223663859dc04d13d
- SHA512 8c2c6de4e3874175c54794b74701e226c99bbb2f0660026891f96819167b8b53f15e5126fbb96e6d904ed459388a54907333e210fb19336578ccd418f76a84cd
- SSDEEP 12288:YWuFtLojb3nyFTlwKVpALjcwkdVLv9mg/nhCkl3JTHu/WJiLZe7ZU/U7:PuFtUjb3nI3yjNkdVLv9FIEHu/WJQZef
- TLSH
  T196D423364217C00CA6B128F56228E92AF6054C05E1F9AA1F535DED76B0F5FCF1E1BA27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral6
- Target
  phantom-loader/assets/stats_93.dll
- Size 970KB
- SHA256 545e35db8d2492f76bbd62d56cf89c1260ffd8fc86bc9e63a986ff71656129ce
- MD5 45133be8e9b45d4c77ae481c55766def
- SHA1 c997761595a8d75b55f86bdeeca27d85a138aed8
- SHA512 2dd68edbed6d87b56c5ba10d49f570bc6c0ad1f17e29d74e5755ee431d31ade3a99f46e4dc91e9381b2f9c264daed198695b6cb2f805d8fde58fd0c4238fa0de
- SSDEEP 24576:lZoNSWURx+6MoEITpys7Ut99Iehbggiy9+8YNwMVYu8Fb3K5CUrl:HnBEAgW07IeygT9+lGbbaL5
- TLSH
  T1A625338F44692DF5EC5698B229F0B49C5206D856D690ECC28C3B1FD2D8B025F778F798
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  phantom-loader/assets/struct_102.dat
- Size 942KB
- SHA256 5be8f0c4715cbb9e962593225d689c292bf00153b5a0c2e01efff834bbd6d3f5
- MD5 6e03ce01819581a8e61de29fa56ee0e9
- SHA1 6a7be4e65a10a41ce4e2f335bcbe063d5eceef6c
- SHA512 500d2bf3a9a2dca2b2af6bf9ea447cd51dfa67d39cbf50238c00e4f42cbe7d416984456c2ba8645fd01b2311404f17899dff221fcacc975280600d782ff4b2d8
- SSDEEP 12288:aOYwBIGMnCLp/VWnAprEZHtHsPNFzlaOznGm6I08KN74VPl093LR2/Gvq5MjzVOX:aOeG8UVWA2ZHtJc64+ESgevqu4BsJw
- TLSH
  T1502533CE54A3B6CC6E02BBB5A5D540327F0A836719D314B72F226AEAD9ECD7050B3D10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral8
- Target
  phantom-loader/assets/struct_116.002
- Size 704KB
- SHA256 90138f798627ef8293dc5d659abd857486a33228010708e093adfad4c29f9305
- MD5 58817299be520a2f601c4a370c9405a9
- SHA1 45cd01d3d3306cc2d9b7670c1cd045c2af2618ea
- SHA512 8a7f7b2ee062b3413139d3618e255c612f99b5d0366dee5b7c1b3c9cca0c88cc804b1b9b54e3f1c190fd59ab6271e0712cb3270692e90f84b07499ce982593b2
- SSDEEP 12288:ncXjBBx/dUI5aPTvbCTIDu3OLnmYSmjs8BeVZAfdNiAczY87OCboXDnvxajs1qg:ncXDbwrv+8u3OLnm1EOZIdUvOvxdqg
- TLSH
  T17DE433624BBB2E01B74FF65CFB8DBF56402B265C925C469F7816DF8A32CD8124C60D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral9
- Target
  phantom-loader/assets/struct_3.dlm
- Size 780KB
- SHA256 c6c979b64748d7587910e08c10e2add89939ba7a4db506f3596268013c3621f1
- MD5 2b96ddba1c4e35cba899b070f936374c
- SHA1 09dc7bdcc0e4a1b61b8cfab42b14aebe45fc484e
- SHA512 2c7d6c16495c7460211bc42dcddbb300d60f4486e81b5e50afee8a61d312a71e61da7708e65859f8d92c1f6ddbbc0b3ebcd9ba66614af1083512f3ad7c84a5e1
- SSDEEP 24576:eWmH9vV3TK3C6AAIuAjUdbt9hLXY/He6i5IyDT:zmH9vdedAApAjAtDXY/HevH
- TLSH
  T1FE0533408E73AD9C247A9854EB65F4492EDDAAF0BB7C6ECE86078B072367D5F7401083
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10
- Target
  phantom-loader/assets/struct_48.dlm
- Size 1003KB
- SHA256 54ae1d0e5dcb3cce706861459f39a6c0649868bc3e685c585b6d5954da4bd8ee
- MD5 0f46edcf1d90340473ff09be68bf1eff
- SHA1 c164641e5ae474f38101acf8469091750fc1802c
- SHA512 b0ebf036ace7262f6439e3eb0200355281064d05fad935d0f3dfda9ef608c78cab613558b4ead882da6f1d847db0a2647d6227e0821830a6f2a48a4ed015b0da
- SSDEEP 24576:SRRRTFzBVqmm6lCdA00xKjiB0mbzgBPrEXL2N:SRD7JrW5oCgPgBPrXN
- TLSH
  T11525338AF8671C7DFD11EF145AB631108AA92366DACD3C402B4A9E716FC90F37E48493
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral11
- Target
  phantom-loader/assets/system_134.sdata
- Size 898KB
- SHA256 b1719508fe8d9aac3c784d068dc3fb5ad1c740b2ae4bf509f32d8b18b2bcefa8
- MD5 c246b80f19672eaa567cbf6b13465892
- SHA1 7fe999c7508ef2e9477ad61f7cc185d45c8a870e
- SHA512 774ded3983855cb6767e6c0476364d41f66cc164d36ee3dd9c062b8d67391cad2e5e7af7020d95e6a2ff9458d1503532ace0ea3b97e0a4f76000da2a707a4ad4
- SSDEEP 24576:EjN8wfcjMz/kNA9ssHH74M6TU8Z7OLwqjxzb5FspV:EjNBfcjx1sHb4/ThOdb5eX
- TLSH
  T11615339560FB186A36005870CCE68A5EEFCF571A13ADDA5CBC13B879A61D08833D7EC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral12
- Target
  phantom-loader/assets/system_50.sdat
- Size 774KB
- SHA256 09f5cda7f3e68ee7bdbdf2763d1b32f00bc1338c3c0daae8e624aa1dd078a8da
- MD5 ecde864dd2bf96483d7122eb234dcfab
- SHA1 780f549c5009421b541d531301cc47a69a07e5b6
- SHA512 4093ba62278c8d18fb8b9f79baf7ae4cbf1aa3ae8ec70059e44f1f7c4ffb102675da1c3a4db679f4ab48756d7c69789b1e5eafbb5e6a6052563a40d3b50b19c7
- SSDEEP 12288:TZo6+wcOQxsRBRpYoeSO8/f505lxSbkue1UN3JM8lT1hNnL4FS9kOR7y:lLkyRBASO8m56bmm53N8Y9Ru
- TLSH
  T187F423ED3849C298212764178F1D74EE82CF9FC6DBBE2B5DDC319A528781AC18397274
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13
- Target
  phantom-loader/assets/system_61.sdata
- Size 713KB
- SHA256 5e6bf2ccc8fffbdcdcd833b2b3ab0be54f35baf72dad5b981a7a173a10724eb0
- MD5 e695d4062ec67130bd1d5400d2e5cff0
- SHA1 6f50095c5ad9a2bfba39e5cc03a359342e8d2b09
- SHA512 57e546e120a94826f9ebd186b0b19879e6d12f8361f0daa38550cc032a362eb1ce2d7fca0a0a5a002df8ee5fa130a0a230b1beb207492e55378c7b4cb40fd05c
- SSDEEP 12288:HXmMNvu5VIdjg0iD2evzGP36eF3vgDfsa+PtMs8CD7B8wQ7iVl+21n9UWRCLOZuh:H2deiD2evqZgDEa+pD7B8tiVL954/5
- TLSH
  T12EF433816DF747F45134F01976BBCE59C0CF264A4990EE35B928C83C61EE26FC79892A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral14
- Target
  phantom-loader/assets/temp_125.dlm
- Size 977KB
- SHA256 035bd8ce65c026ef6be691f6061e8a0902b74ba76b08db67cf8f94ee1359a5e2
- MD5 1acc06cbd9fdd7260faa75c0e4198e36
- SHA1 669206527963fb396f617a034bf1e4ad1ce6afcb
- SHA512 55b0c5238ff3e1efeaf3e3262960b2fc23c174ce2bfd63822637939516e1bf50ebb25df6e103d2f6775ea449781304b59baae7aefe6e66041bb45e5589ca0895
- SSDEEP 24576:htisUa/O3MEKcazzdJGHoZMHNCqiAmSPBo:5sMEUXdJGHrH33o
- TLSH
  T185253361AA01E309A9B7F39560069C4D1DF3995D2BB1D3CF4BCDA372F63C78A812E251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15
- Target
  phantom-loader/assets/temp_78.bin
- Size 699KB
- SHA256 14149f135627af56217d5dcdfe0392e47af9002583ceca59e61ae5f4bf5e6935
- MD5 c9a028ab6a159c9ae8a4810ccdb983d3
- SHA1 e51ed68db9d517a276ef82444360a83af435a8c6
- SHA512 0a5b72fae2a622318333b623f271943d6c3c6b8448b27f73a612d60ab1cb9bd216bcc2a27734cd00da2372cd809261ad22821e7daf5c376b8252efc1e56e69e1
- SSDEEP 12288:BvpT1QEPvtOREGwc5yC9m4DnF4gS9KGjmSi2CclakmU0OXzICkg22IsGM:TTOEsByimYnJGwc8c0ozNPD
- TLSH
  T13FE4232D9611725E9622F4B8045357B949E4C02EC5D2BA6431DFEE9E8C1323F29F1BF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral16
- Target
  phantom-loader/assets/test_101.001
- Size 792KB
- SHA256 cb376c62682f80eb0d8d4b2f27cf695e991be8dcd63031a3ae20a0fa46680f6f
- MD5 306c615894a06d8ff8fd7452bb5fdbd8
- SHA1 3eee0456019434ec2ba4de167c4bd57d1f83b264
- SHA512 f34810ed23d3b25ee2ec838b96479624bd74a164bc782083c84fd803f2909f0618be7d92a60090360bfd123729cb42cbde378a8d69cc92455c4cae43eab62bb6
- SSDEEP 24576:qONbnRyghbrUfc9QkF2n+8iTx6uEJeoP7gGId7qSxQ/jdmzGe:xnJbrwc6RPIxjEbkGekLdgz
- TLSH
  T181053334F5A157A7218B6876C145E4408162FC8AFC3FE102542CD2F7AE173E97A7AEB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17
- Target
  phantom-loader/assets/test_11.001
- Size 535KB
- SHA256 98d5102d73bb744362a2390e432830b3afa6b95f96fdff921ca1679e381912fb
- MD5 93b8f302805719c86a58bbce086eff3d
- SHA1 0249812ccbb85636bd90c597ca431a9e7de150cb
- SHA512 cd83aed761a437d54fae6f66ca7a78b485b12b86a8b1213373ae4452b11b7d55baf85c6ac519dad4753d3f53c815d6f2324149ea3dac4135d796e42745820673
- SSDEEP 12288:vhZcr4VdYV0TN8xZyTbuG9n1tN1f4ts+UcGiWfFH/DG:vh244VACyP1tY0NHK
- TLSH
  T1FEC423BA6C672444A73276C57CF6ABD05C702F09EECAC1C54B59B1CA807EA980DCD7B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral18
- Target
  phantom-loader/assets/test_7.bin
- Size 985KB
- SHA256 7bc659a8c7e4f976af92e748ef176e3a19ce268a458f0698076d9ed87b7bc539
- MD5 ee85680eccec2b9859a4cb59f8e16a74
- SHA1 1b35542ebf890f8aa2920969ea0d94395cb87dfe
- SHA512 8cda549433905b4e9a5983d5fa38aae3f0f73eede46a6953d56283837bb1c67861d9c036e62fbc2577d53c7e62d5a1aec425c5130dffb2b5758ec16c9bea104b
- SSDEEP 24576:4NQ+AQ1r8xX7iilfOqvc8mnDHHy6Er2Fu/sWE9BgseP:SA2r0LNgqv+HS9cu/jOuP
- TLSH
  T1F4253364F3D15F1C8B988DA3072239DDB37D5E1CF827B3C6E095208656C31AF2BA9496
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19
- Target
  phantom-loader/assets/test_73.000
- Size 638KB
- SHA256 1288f50978eeab96ff2c3b9905e14c3e2dfb790ef50d24c512233aee9cc57e65
- MD5 f4e2fb8e4d8b9c0ef972875c2738f917
- SHA1 a46301e423346d40ecf1896f56846461a7f06262
- SHA512 598893177d9c9972be41f35e7a228bca130e2f437669d92f8b7f76fdbf67cbd55ed52494c7187b6f0e72c055714573a6bd48bdbbb1537bf491031d53b611304d
- SSDEEP 12288:ondQeZqSIGvfAQHvGqaSwhnOLfK0joj7d+tgBHipd72Iu/m2V7sowhh:o48FHvgSw2K00jJ+CysV/9o5
- TLSH
  T1E2D423E478659C3B0E82D0B9B216EACDBE25BCF92DDBDC9D2137769C204AD244085F5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral20
- Target
  phantom-loader/assets/test_91.002
- Size 796KB
- SHA256 8ec652fb3f0f6ae4bf8971777ce7cc8a9f888b843227b6f79948c1b984b6d17c
- MD5 b374a7b814247ae829d11228f7fb3d88
- SHA1 f2b763da5377c9077850850e81f9282ef492a20f
- SHA512 7a73c80dbabbb78d96b47a1de8a42fceabeacd4100baa8e8dc80ae4f3907db7a17adc9def56a4fb370cf5454507b859e6c8790fb82a97cdcec9597f1a72516a7
- SSDEEP 24576:49/uxs0sJYioYFzsn/lszGTgq23UWf8DV76Rs:Mmxs0QYioxdsy2sDV76y
- TLSH
  T19D053352440CB9591FEB41CBD98EC74C8467247FBEA9B81A2DA063C9FEDC2E788501F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21
- Target
  phantom-loader/assets/utils_109.dlm
- Size 568KB
- SHA256 5d4894c57fbc64e3185fa8c4a66150118ab62dcc9098e54042ea2cdb1f2619b8
- MD5 611b4735535ff841145591ab76b0d5b3
- SHA1 5612a643838a3e0a8cb24071201198fa5e06d3bc
- SHA512 24027154fe4b7a517bb671ba8d1c2c4c8bbe6b217da1091e714a4cf6aa2938e33ccc00de1fc8f256bdbca8fd4706bab617d693ccb537750740a28f69b62716fe
- SSDEEP 12288:B8cuimU6N/EUvIORdTxiE7+Uvx2la1ksAIb/9/LJD4DM:3AWE/pkgksAI/LJD4DM
- TLSH
  T182C423380BBDB5A24DBF53DF3F64757B18A2444A03E84C9066705D321E931A897F3DAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral22
- Target
  phantom-loader/assets/utils_137.000
- Size 560KB
- SHA256 13a8e97897eb7807b6bdebc1718c8272dfe4abdc694e47c08e4a0ffdf98ece2e
- MD5 4ad25182300216a8ffe29d3e539cd3de
- SHA1 c9fd0eb81df1b047654e2d1bb6f7fbe6171a5101
- SHA512 70e7b6080a6cc181904e84d5b71bc3d810da66d2ed2c53a5dc7a91ad14b7a8016bd5ad5082bd4d5d43ba678ef2d53724f8f189ac4c4f3380f7f8ea997500dc9e
- SSDEEP 12288:4Ljtp3h50n5qoc8rG7i3WJsgpbJtPNiczUZmyc6:4vtT+n5qoc8jWJsgpbJtPN3wZh
- TLSH
  T116C4236F6C22D5E49D43CCCD27E82DA874777264D3AF2611E9DA7C98921FB388D18047
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23
- Target
  phantom-loader/assets/utils_18.bin
- Size 612KB
- SHA256 1e6455fd46878370801f6c2794f51532a912cabf9d4f48c01c0aa2c7fa9560fe
- MD5 36b3cdc0c36150bceeec759e565e5fc1
- SHA1 1affb1a144a551da32dea73e2fc0b3f86eb2923e
- SHA512 1fabfe64badf3fef7a1d704fa541c5b07e20877391dcd94645e3bcb41c6d147129411cdd54b57d2ed680c1604018995fbbd328cc0e084f4a3416e8bfe483c754
- SSDEEP 12288:QKRGZ43XcxTnIHK3X+AVlmXY1SZejoKapOC80FbAxcexi:QKR4esP6Y1geEBpOC8Rxcexi
- TLSH
  T113D42345B5E0E1DBDAC621481B5DE04A5F295F6B579C622CCB2DB31D2308229F2F3DA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral24
- Target
  phantom-loader/assets/utils_29.sdat
- Size 894KB
- SHA256 e530345b30c6db0de14b86a9f570d8a59fb41846e2e3cebeca4d844342f603c6
- MD5 000f1a90f77d9b5a3c3870ec823cbeb9
- SHA1 e14619dbfae3f27b00b418d1890cb1cf9e9a9b47
- SHA512 1731e9b67cde5057a5a5a7818ff9c6742161aeadd2cec9ebfaa641fed872f2b003f847aa3c442b5e99bd1da81a8ec3d091703b62f326c35cc84abb365d7982d5
- SSDEEP 24576:szAsN4wBRHZLc7YWgk6eUAkMhv3eHllGW+Vx4qmJNZ:s8smwBrLbWgw1d3eHldG4qmJNZ
- TLSH
  T1A915333522CC16C0A6CE86C418254D4EECF9C1ED1946319A6EFEA7C897EDB787C4A871
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25
- Target
  phantom-loader/assets/utils_70.dll
- Size 536KB
- SHA256 2e68f8462163c2ec6278f7fcb313ea52457ab21ad1ee6d563a1286f3b5a94ad5
- MD5 0ae86f8cacbc6bf6b6058183a8f0a632
- SHA1 65f27957dbc5adef90294477847cb7c7c47363d9
- SHA512 39dd3ab048164a172e9f5be495f9c3766fc4521ac8450edfccb19e4b046185b6502c10dd3a3c61dacec536ea307a59135a93fcf57efdbd8ad6da5ef0193eeb28
- SSDEEP 12288:RN2ggkKdUFONUfjtJXgI+mO7g+p09QoPLXvnCDLXf1P:RNgknFO4vghmO7O9QTHfF
- TLSH
  T131C4231E2E1E79CFD0AED5F0DEDB09CAC038B212B645F21F3E219D64A13477A4AB1519
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  phantom-loader/assets/utils_76.sdata
- Size 996KB
- SHA256 7b2ffe74c21ced8c9cd00ee4ce7f9d1d016f2c2c94e8980f962c2e74ea44dfe5
- MD5 9d27fd197488d01495cea4e2b4bf0ee8
- SHA1 c51549e4ccb8a21f72a037765cd82a52fe82a474
- SHA512 a14b3a4b52f1e923749b8038d9ed99c30026df94e34819838bf23ae1934f8e4eb0b4de7e3a0fa573cbb6249896863064230fa343026eae03e960c01980cd2bb4
- SSDEEP 24576:byg97prppkOlJg+DKB+xNl8pro075SEXy65IhRYi:byg91T9Y+DWKYrLBXH5MN
- TLSH
  T1FC2533A470936DA3D9C0109E4B486B83875F4DEF5F02AC26AF7BD519927C08FDA09793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27
- Target
  phantom-loader/assets/utils_97.sdat
- Size 706KB
- SHA256 0ae223cdc66863c1a45ed26d876271ce41c1270a7456bd705712e30646058110
- MD5 71907d57030e9675be871ba9cf97c453
- SHA1 8b45a26cd5325d649883b03f3236ec2c4d051532
- SHA512 0480bb688101964a39f5b865032ee26bee6ce623f4b467ac78772b6aca058cc94269bcbdb4c4b2983ef2f304400b41444aa4ffd3242c85f66158a1c79945bf0d
- SSDEEP 12288:Xy3T3WDf5wGvTDlYpbbnxTDiV9d8dcUxtPmdTrEoeGchl8wJYsbeSufym:WT3W75jvTDlUfxTMb8iUP+tbQ46qSY
- TLSH
  T1C7F423327E2D766502ED2F78044CA6D8D333217A67A1EF39D47DAC228612746AF7243D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral28
- Target
  phantom-loader/data/Qt5Widgets.dll
- Size 4.3MB
- SHA256 400fa69aa8803f6c3a6f9a5fc956475d0396095c4b6d4665b7aa29bbcb8e3640
- MD5 f697ffc85fb86d72654c4f5ba4e1bdc2
- SHA1 670657f598d408ab232dec75be6fc7983bc5ce4b
- SHA512 47513892c22a193c51ecf09c8f3e4c4271a92be33b7b7d535290ea75a1498c5531881a26a85dbf758361e6892abf12a796f1c5c284a34f1d173d61d2012325b7
- SSDEEP 49152:Zhk8cs4FhK1FKBxR8Lcdm0OTqZ7uA/GrXHIaTU+cDZ0V37SUJ:7k8ymoBxKAdmL8yONaQi32UJ
- TLSH
  T180268E83B2C101F1C8859275491FEF5BC5BBB1164B5652DBE38CEA0368683E12E7F687
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  phantom-loader/data/debug.txt
- Size 295KB
- SHA256 3baff54e49ad2381dc2f1d3b83f2d0c334430e6f5a00db125d29034cf2035ba2
- MD5 c8f2a6242df270c9f81f3affd2a9b28b
- SHA1 9d6cf0e39656d7234ba6c9089223c040c02b8362
- SHA512 49ed430b48cf9f11636d034351baacc5a6869edb7130f025bb31d7632d7a83d0d94204e7c4932ed38c3f54002c35c15dc187973b9ab31055b65b98ba221a8893
- SSDEEP 3072:DrP9ATX4/NqpcHmfAXwe16cU9VVvAjJn1Jm1BgksOlQYLZ12kv6G22yw4xuHBKL4:u
- TLSH
  T17D54005D6253CC74E1800307ECA98D323BF4AE4FC399F828B195EC197F6795A6AC6532
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral30
- Target
  phantom-loader/data/project.xml
- Size 101B
- SHA256 11e0deb19f0e17f2461414948ee25cc4283d2cd059326369218e3b8061d00ab2
- MD5 7a611d1b01b57e3e28018a49680e63f1
- SHA1 c726e01fa4d2fe8c94af7f1cf5a5c2ffecb5af17
- SHA512 b08cfaddb26cd2f069ccb3b64075a607be212d3f2169121ade1d2e1b405dfece1d9aa386523939e1fc818dcc898d4eec31b51489c3e4a156314227513e3f825a
- TLSH
  T1CCB01200A341DC35464097051779C01913A865265584510C6CF11CA00FAD65406CD128
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral31
- Target
  phantom-loader/data/remote_settings.ini
- Size 44B
- SHA256 efc3a099238b9e63556b7b0342029830843072fff4a721ce95abcdaaa94f302c
- MD5 f904d94be2e4e5dd262e84fae2884865
- SHA1 a099012a12b00d81f9263de0bf3163171f25963f
- SHA512 77a17da95baa24eb832ead0d7f33a12515575473f8b6c5b1d78739256ed0449657f58d2f14cdcff81774af6beae8524f5a46d5d4e87ffd8de76851ce360f5e7c
- MD5 SHA1 SHA512
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Loads dropped DLL

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32