Extracted

• • Target
    3ecb650c471d7c8291d084fffd634da0eddc9a473d29792d5033fe5fdcbf4ddd
  • Size 400KB
  • SHA256 3ecb650c471d7c8291d084fffd634da0eddc9a473d29792d5033fe5fdcbf4ddd
  • MD5 80f5f2296cae3bea63fc14a867d97dd4
  • SHA1 d3d87cc1e2f1d0df7ccc78e819fb58adc584caae
  • SHA512 163e2bd5fc1d85ddaa9aea7933ccde7e49733b256304695918c7ae2b6ff790235eeedba26a4a95c79554f924289d885f6796bd7136c46299c516ebdabb8eba1d
  • MD5 SHA1 SHA512

  Score

  10^/10

  phorphiexevasionloaderpersistencesuricatatrojanworm

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • Phorphiex

    Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Phorphiex payload

  • Windows security bypass

    evasiontrojan

  • suricata: ET MALWARE APT-C-23 Activity (GET)

    suricata: ET MALWARE APT-C-23 Activity (GET)

    suricata

  • suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

    suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

    suricata

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2