Extracted

• • Target
    d9edee0541b9a5baf2cb2b1915aef1d034efd4edd4b3c030b508669da1e2aaf2
  • Size 418KB
  • SHA256 d9edee0541b9a5baf2cb2b1915aef1d034efd4edd4b3c030b508669da1e2aaf2
  • MD5 36a8bf060f86867226c4268b41965e48
  • SHA1 39aaf27ac2f3d346a181dc74fa4555da429580fe
  • SHA512 ac39821cf66124393f9dcf42c0501f5c6a20ebd9cc6b5034ecf13f30e13ca8900efc738aa5d060545da8969dec5c46f7105d01ff27f4836e787268925b83bb47
  • MD5 SHA1 SHA512

  Score

  10^/10

  phorphiexevasionloaderpersistencesuricatatrojanworm

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • Phorphiex

    Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Phorphiex payload

  • Windows security bypass

    evasiontrojan

  • suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

    suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

    suricata

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2