Overview

overview

10

Static

static

3048_16477...62.exe

windows7_x64

10

3048_16477...62.exe

windows10-2004_x64

10

Resubmissions

07-07-2022 07:45

220707-jlqk3sheg6 10

25-03-2022 07:12

220325-h1j66sbec5 5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3048_1647779912_8762.exe

  • Size

    566KB

  • Sample

    220707-jlqk3sheg6

  • MD5

    556af53c178fa835be6aa971630a23c6

  • SHA1

    f34c646fe356772477d4f2e4226596b8bed40cca

  • SHA256

    3510aec49416b1e42f8958c4dbd7cf3b8aaa124b2a3d39cfe4829f943f67ac64

  • SHA512

    d73979b5f20b1e759d695f55ff046831e715a1efd981f77af6fce572a6717656be60b36805fdb58b50592fc7d7641c8431fb5e946d8f793fb5e45ec1c0f600bc

Score
10/10
phoenixstealerstealer

Malware Config

Targets

    • Target

      3048_1647779912_8762.exe

    • Size

      566KB

    • MD5

      556af53c178fa835be6aa971630a23c6

    • SHA1

      f34c646fe356772477d4f2e4226596b8bed40cca

    • SHA256

      3510aec49416b1e42f8958c4dbd7cf3b8aaa124b2a3d39cfe4829f943f67ac64

    • SHA512

      d73979b5f20b1e759d695f55ff046831e715a1efd981f77af6fce572a6717656be60b36805fdb58b50592fc7d7641c8431fb5e946d8f793fb5e45ec1c0f600bc

    Score
    10/10
    phoenixstealerstealer

    • PhoenixStealer

      PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

      stealerphoenixstealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks