c1a5bc0019c3f894bc908e0c0c0e3ff7

PE Executable

MD5: c1a5bc0019c3f894bc908e0c0c0e3ff7

Size: 398.85 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	c1a5bc0019c3f894bc908e0c0c0e3ff7
Sha1	b0a40cb77958323603879c3595142914b78c3308
Sha256	fbec2d3d5a42f56aa8ddda61d924445dfa11580f6b98d34006701639b7d65ad7
Sha384	23f9cf126783af6122f9b46d9b243dc890c4203bfe4e025894996c0ccc4cada9621aed73577a9959b1756dcf10e92933
Sha512	b50d58468dd2d17b48790d91cbfeddd030c0f53f7c6c872c79d5ccc264cf3a31dfa60eb76af9c50830a23c8907c321c829bd729726296f472f55dfd94a56c009
SSDeep	6144:uP4C3G3Qytik9H/2M9lmQlAabiZgvkwURAdPz:uP4C3G3Qyti8H/2cmAk
TLSH	9E8417A433F44605F2FF6F75E8B045118A72F88BEA39D75E0AC9409E0D72B50AE50B67

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe

Shape pe:exe

1 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	Phantom_70796db36218.exe
Full Name	Phantom_70796db36218.exe
EntryPoint	System.Void PhantomStealer4.Programs::<Main>(System.String[])
Scope Name	Phantom_70796db36218.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Phantom_70796db36218
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	4010
Main Method	System.Void PhantomStealer4.Programs::<Main>(System.String[])
Main IL Instruction Count	7
Main IL	`ldarg.0 <null> call System.Threading.Tasks.Task PhantomStealer4.Programs::Main(System.String[]) callvirt System.Runtime.CompilerServices.TaskAwaiter System.Threading.Tasks.Task::GetAwaiter() stloc.0 <null> ldloca.s V_0 call System.Void System.Runtime.CompilerServices.TaskAwaiter::GetResult() ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.