phoenixstealer | 43b21e60d088a3eba1b23f5aac9deb39d86f27a819a2e179a7edbdfd407264af

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05-04-2024 03:39

Target

c9c937d7791010e40713bf9c7812a532_JaffaCakes118.exe
Size

546KB
MD5

c9c937d7791010e40713bf9c7812a532
SHA1

2d09ec0b24b7eb281d5e37ad3cf3fd9fe9336615
SHA256

43b21e60d088a3eba1b23f5aac9deb39d86f27a819a2e179a7edbdfd407264af
SHA512

2afc3e89b8bdbd2dd280802bb73d11fb5a4d41b6100ae6c1bc61aa099f3387c91068b9478c4888800e4fde6e70cc43bebd258b33e4b09809b3f1c103a0fc132f
SSDEEP

12288:aWWzIRlRn2/rw7INjVGCXZq0iiIxTp5TQdIJWjI0g0A8Hcqr4d:aWUWrnIrw7I1VGCXZbiiEQdAWngR8k

Score

10^/10

PhoenixStealer
PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.
stealer phoenixstealer

C:\Users\Admin\AppData\Local\Temp\c9c937d7791010e40713bf9c7812a532_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\c9c937d7791010e40713bf9c7812a532_JaffaCakes118.exe"
1⤵
PID:1460