Overview

overview

10

Static

static

10

8f49d7e359...in.exe

windows7_x64

10

8f49d7e359...in.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    8f49d7e3596aff4c8cd3aa38d0dc6911ae77e54cc3b13210d95c9f38063317a9.bin
  • Size 69KB
  • Sample211221-n239bsdcf3
  • SHA256 8f49d7e3596aff4c8cd3aa38d0dc6911ae77e54cc3b13210d95c9f38063317a9
  • MD5 SHA1 SHA512
Score
10/10
phorphiexevasionloaderpersistencetrojanworm

Malware Config

Targets

    • Target
      8f49d7e3596aff4c8cd3aa38d0dc6911ae77e54cc3b13210d95c9f38063317a9.bin
    • Size 69KB
    • SHA256 8f49d7e3596aff4c8cd3aa38d0dc6911ae77e54cc3b13210d95c9f38063317a9
    • MD5 SHA1 SHA512
    Score
    10/10
    phorphiexevasionloaderpersistencetrojanworm

    • Phorphiex Payload

    • Phorphiex Worm

      Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

      wormtrojanloaderphorphiex

    • Windows security bypass

      evasiontrojan

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks