Extracted

• • Target

    db3c481f3eff1160e337e7971ef1d5dc_JaffaCakes118

  • Size

    404KB

  • MD5

    db3c481f3eff1160e337e7971ef1d5dc

  • SHA1

    233bca64d79acfabeeffeb028d8b0a011be38de2

  • SHA256

    ae73ef74543ce177e7d376df37c9d497df69bdb3777a5e3efa5cc43205321414

  • SHA512

    9754726b363c4ea7df6a7226f24357f1b82b727c159d6b58c902dc5fab53896aeca728a91795a7bede94ac1df22e4d90dbde5fdfe3cd27d94b4119ee7e0bff72

  • SSDEEP

    6144:u9qlSqfb+6C82rv7pQsvKC1j7BQRyDo5Sv307a05LiSzt:u9qRfb+6C8A7p/z6ygEd05LiEt

  Score

  10^/10

  phorphiexevasionloaderpersistencetrojanworm

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • Phorphiex

    Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Phorphiex payload

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2