phorphiex | 68ca21ebaec1f7a40e25b348e8275c56b7fede56ea30ec2215c535f63d5f04da | Triage

Sharing

General

Target

68ca21ebaec1f7a40e25b348e8275c56b7fede56ea30ec2215c535f63d5f04da.bin
Size

67KB
Sample

211221-n2219sebcj
MD5

ade8d1af64fafc95075e8f95791960f8
SHA1

c5c25ebce958e2d7d1d681b0f99491a3aa93457f
SHA256

68ca21ebaec1f7a40e25b348e8275c56b7fede56ea30ec2215c535f63d5f04da
SHA512

c18054fa285b862b87f89f820fb224e89be5d85988a3e5280022ce552b6b8d2de96d28efd7e141c38456aae36e600b9af296dc83a0a15cfc1708c3f541a0649c

Score

10^/10

phorphiex evasion persistence trojan

Malware Config

Targets

- Target
  
  68ca21ebaec1f7a40e25b348e8275c56b7fede56ea30ec2215c535f63d5f04da.bin
- Size
  
  67KB
- MD5
  
  ade8d1af64fafc95075e8f95791960f8
- SHA1
  
  c5c25ebce958e2d7d1d681b0f99491a3aa93457f
- SHA256
  
  68ca21ebaec1f7a40e25b348e8275c56b7fede56ea30ec2215c535f63d5f04da
- SHA512
  
  c18054fa285b862b87f89f820fb224e89be5d85988a3e5280022ce552b6b8d2de96d28efd7e141c38456aae36e600b9af296dc83a0a15cfc1708c3f541a0649c
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan