General

  • Target
    7dc4c399b8c13bba3ec5460bfb227d9024b6997250ee850f45c54a805031c752
  • Size 84KB
  • Sample220327-3dptcsadgr
  • SHA256 7dc4c399b8c13bba3ec5460bfb227d9024b6997250ee850f45c54a805031c752
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      7dc4c399b8c13bba3ec5460bfb227d9024b6997250ee850f45c54a805031c752
    • Size 84KB
    • SHA256 7dc4c399b8c13bba3ec5460bfb227d9024b6997250ee850f45c54a805031c752
    • MD5 SHA1 SHA512
    • Phorphiex Payload

    • Phorphiex Worm

      Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    • Windows security bypass

    • suricata: ET MALWARE APT-C-23 Activity (GET)

      suricata: ET MALWARE APT-C-23 Activity (GET)

    • suricata: ET MALWARE JS/Nemucod requesting EXE payload 2016-02-01

      suricata: ET MALWARE JS/Nemucod requesting EXE payload 2016-02-01

    • suricata: ET MALWARE Phorpiex CnC Domain in DNS Query

      suricata: ET MALWARE Phorpiex CnC Domain in DNS Query

    • suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

      suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

    • suricata: ET MALWARE Possible Malicious Macro DL EXE Feb 2016

      suricata: ET MALWARE Possible Malicious Macro DL EXE Feb 2016

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks