General
- Target file.exe
- Size 291KB
- Sample260720-ls6a8adw9k
- SHA256 f21d7f1ab25a6bc80468ca3ff7c6b650f26962fed154c566926e403bb44fadf0
- MD5 9f0c8ae2bcc8bcef7e0ba43e991b49ba
- SHA1 7ce6505cd3543649a7787f3a85f0fb0083a97cd0
- SHA512 5fafe4a3b7eccece3052c0055725c9f4bd33e477550d6e029986d470a506613473aae661e1a724496440179ea35d5cdd94e3bf5cb08bb14dc41639477a823acc
- SSDEEP 6144:XC0W/2rYnPg2+N3AERKgXj9UJb7Z75k6e/iBf:O/28Pg3RjXCld66e/o
- TLSH T1A254B7143BFA5418F1BBAF765BF475968E7FF6633A03854E0491034B0A32A81DD91B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
phantomgate
C2
-
oficialrem.duckdns.org
Attributes
-
port
2404
Targets
-
- Target file.exe
- Size 291KB
- SHA256 f21d7f1ab25a6bc80468ca3ff7c6b650f26962fed154c566926e403bb44fadf0
- MD5 9f0c8ae2bcc8bcef7e0ba43e991b49ba
- SHA1 7ce6505cd3543649a7787f3a85f0fb0083a97cd0
- SHA512 5fafe4a3b7eccece3052c0055725c9f4bd33e477550d6e029986d470a506613473aae661e1a724496440179ea35d5cdd94e3bf5cb08bb14dc41639477a823acc
- SSDEEP 6144:XC0W/2rYnPg2+N3AERKgXj9UJb7Z75k6e/iBf:O/28Pg3RjXCld66e/o
- TLSH T1A254B7143BFA5418F1BBAF765BF475968E7FF6633A03854E0491034B0A32A81DD91B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10