phorphiex | 5fae9e2f6fc2e95b5f6be3c8c0d3a76cebf18a2526913d21c67bb98be35f8247 | Triage

Sharing

General

Target

5fae9e2f6fc2e95b5f6be3c8c0d3a76cebf18a2526913d21c67bb98be35f8247.bin
Size

58KB
Sample

211221-n21s7sebbr
MD5

b53466259125d66deb6ef9d787fa1b13
SHA1

2b1ed9a50728df5aaa716e4c4e466b4496e8b105
SHA256

5fae9e2f6fc2e95b5f6be3c8c0d3a76cebf18a2526913d21c67bb98be35f8247
SHA512

e400dd2421ef16460253042e0d8f7fa2c45e012c6b93ce5cab3811beeeddc12fb13a78828212c25b93cfb2b23176841bf2dd8e39e45d189652faaa4100cb1b09

Score

10^/10

phorphiex evasion persistence trojan

Malware Config

Targets

- Target
  
  5fae9e2f6fc2e95b5f6be3c8c0d3a76cebf18a2526913d21c67bb98be35f8247.bin
- Size
  
  58KB
- MD5
  
  b53466259125d66deb6ef9d787fa1b13
- SHA1
  
  2b1ed9a50728df5aaa716e4c4e466b4496e8b105
- SHA256
  
  5fae9e2f6fc2e95b5f6be3c8c0d3a76cebf18a2526913d21c67bb98be35f8247
- SHA512
  
  e400dd2421ef16460253042e0d8f7fa2c45e012c6b93ce5cab3811beeeddc12fb13a78828212c25b93cfb2b23176841bf2dd8e39e45d189652faaa4100cb1b09
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan