Malware Analysis Report

2024-11-13 15:39

Sample ID 220725-s79qhsghhl
Target 5586346cf12e01e83034a2eef9644db408c6476ddca7ce43d55ebc2493ac9255
SHA256 5586346cf12e01e83034a2eef9644db408c6476ddca7ce43d55ebc2493ac9255
Tags
phorphiex loader trojan worm
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

5586346cf12e01e83034a2eef9644db408c6476ddca7ce43d55ebc2493ac9255

Threat Level: Known bad

The file 5586346cf12e01e83034a2eef9644db408c6476ddca7ce43d55ebc2493ac9255 was found to be: Known bad.

Malicious Activity Summary

phorphiex loader trojan worm

Phorphiex

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2022-07-25 15:47

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2022-07-25 15:47

Reported

2022-07-26 03:36

Platform

win7-20220718-en

Max time kernel

42s

Max time network

101s

Command Line

"C:\Users\Admin\AppData\Local\Temp\Photo-126-116.jpg.scr" /S

Signatures

Phorphiex

worm trojan loader phorphiex

Processes

C:\Users\Admin\AppData\Local\Temp\Photo-126-116.jpg.scr

"C:\Users\Admin\AppData\Local\Temp\Photo-126-116.jpg.scr" /S

Network

Country Destination Domain Proto
US 8.8.8.8:53 trik.ws udp

Files

memory/240-54-0x0000000076A21000-0x0000000076A23000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2022-07-25 15:47

Reported

2022-07-26 03:36

Platform

win10v2004-20220721-en

Max time kernel

106s

Max time network

169s

Command Line

"C:\Users\Admin\AppData\Local\Temp\Photo-126-116.jpg.scr" /S

Signatures

Phorphiex

worm trojan loader phorphiex

Processes

C:\Users\Admin\AppData\Local\Temp\Photo-126-116.jpg.scr

"C:\Users\Admin\AppData\Local\Temp\Photo-126-116.jpg.scr" /S

Network

Country Destination Domain Proto
US 209.197.3.8:80 tcp
FR 2.18.109.224:443 tcp
US 20.42.65.89:443 tcp
US 8.8.8.8:53 trik.ws udp

Files

N/A