Overview

overview

10

Static

static

10

MATCHA3.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    MATCHA3.exe
  • Size 7.0MB
  • Sample260810-xyg2csfp7w
  • SHA256 5a377768e8920ec7a99a69905ebfd114b7e3c37f0722ba7a7ea99dde17bdeec3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
phantom_stealerdefense_evasionexecutionstealer

Malware Config

Extracted

Family

  • phantom_stealer

Version

  • v2.0

C2

  • https://api.telegram.org/bot8661929523:AAHlD1YuZCosbQnCZJV8xnOWBFblPuT62tE/sendMessage?chat_id=8759568265

Mutex

  • ERJ2248DAZ1KKGV7O3T1

Attributes
  • anti_analysis

    0

  • cb_enables_ssl

    0

  • debug

    0

  • keylogger

    0

  • rb_discord

    0

  • rb_smtp

    0

  • rb_telegram

    1

  • start_delay

    0

  • startup

    1

  • webcam_screenshot

    1

Targets

    • Target
      MATCHA3.exe
    • Size 7.0MB
    • SHA256 5a377768e8920ec7a99a69905ebfd114b7e3c37f0722ba7a7ea99dde17bdeec3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasionexecutionphantom_stealerstealer

    • Detects PhantomStealer written in C#

    • Family: PhantomStealer

      Phantom Stealer is a stealer written in C#, forked from the Stealerium family.

      stealerphantom_stealer
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks