Extracted

• • Target

    2024-04-10_d597a6706b490bbf10fd3532b7fb7e66_mafia

  • Size

    3.3MB

  • MD5

    d597a6706b490bbf10fd3532b7fb7e66

  • SHA1

    db4badb244500fcb5700229f6dac9345a63cb7f1

  • SHA256

    a962b3dfde6aa39c53ee21191aea82e351cb9334f505e69985327cb167740451

  • SHA512

    d5a8884f85c59e81878ee6eec639acb4c5508f5af707b4374b6a1011f3c703a91ed0ff0d588df994cf6c8c18650680a14ece6c29460155a867bd978605662c11

  • SSDEEP

    98304:3buJUT9faYm1AEqKdETxAEi6Mtvgefep8lsWcgD5OIU:rugfvxcmefep8lswO

  Score

  10^/10

  phorphiexevasionloaderpersistencetrojanworm

  • Phorphiex

    Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Windows security bypass

    evasiontrojan

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2