Overview

overview

10

Static

static

10

8f49d7e359...in.exe

windows7_x64

10

8f49d7e359...in.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f49d7e3596aff4c8cd3aa38d0dc6911ae77e54cc3b13210d95c9f38063317a9.bin

  • Size

    69KB

  • Sample

    211221-n239bsdcf3

  • MD5

    5bbd9bc7dafd0a6076ed450aa18afc0a

  • SHA1

    3ec5aa4b6185a505c521b07268d19a12455754e5

  • SHA256

    8f49d7e3596aff4c8cd3aa38d0dc6911ae77e54cc3b13210d95c9f38063317a9

  • SHA512

    2d5f87490b90611bc9602c4f36933294f1021b20893275429b2d36b5e2b691d0eb8703579373dc43929902387032f74a51c7a7ec98aff3a3764d13d0bc8bbd3a

Score
10/10
phorphiexevasionloaderpersistencetrojanworm

Malware Config

Targets

    • Target

      8f49d7e3596aff4c8cd3aa38d0dc6911ae77e54cc3b13210d95c9f38063317a9.bin

    • Size

      69KB

    • MD5

      5bbd9bc7dafd0a6076ed450aa18afc0a

    • SHA1

      3ec5aa4b6185a505c521b07268d19a12455754e5

    • SHA256

      8f49d7e3596aff4c8cd3aa38d0dc6911ae77e54cc3b13210d95c9f38063317a9

    • SHA512

      2d5f87490b90611bc9602c4f36933294f1021b20893275429b2d36b5e2b691d0eb8703579373dc43929902387032f74a51c7a7ec98aff3a3764d13d0bc8bbd3a

    Score
    10/10
    phorphiexevasionloaderpersistencetrojanworm

    • Phorphiex Payload

    • Phorphiex Worm

      Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

      wormtrojanloaderphorphiex

    • Windows security bypass

      evasiontrojan

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks