Extracted

• • Target

    629fba91ff579f1e890e489a028d7eb1_JaffaCakes118

  • Size

    32KB

  • MD5

    629fba91ff579f1e890e489a028d7eb1

  • SHA1

    c6871d6ce30d012e79412761bd6c0c75be37d084

  • SHA256

    6cda2e78e02e7b2d195868d9d47a127e4b7dedd76c95f7f44d5b7fc8ac485078

  • SHA512

    5e5786f841a6581879c929374e848d55525ad73e136fbb8690c5d89587c431ef60c2f666203bb216cd8271fc27274119025e315156cb7b24cf1bb4d59f611183

  • SSDEEP

    384:UOFl9ooXxUDs/uG67GRtA2ZmQF1szUQIENIay2vWpQVGq71BV7ISlDqzhr1zFz:U0l9GDs/uGTNnggERZBV7VWzFDz

  Score

  10^/10

  phorphiexevasionloaderpersistencetrojanworm

  • Phorphiex

    Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Phorphiex payload

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2