Overview

overview

10

Static

static

10

980f4f8d01...c1.exe

windows7-x64

10

980f4f8d01...c1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ABC6E87B5F26BADF.zip
  • Size 14KB
  • Sample241104-kxt83s1jfl
  • SHA256 e0fa830fae317de959f388ef4c8ae19c38bb7ddbd9ab95ed76d56a1838e8b5c2
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
phorphiex

Malware Config

Extracted

Family

  • phorphiex

C2

  • http://b0t.to/

  • http://gshrghirhgsgrao.to/

  • http://hehfaofiehgggao.to/

  • http://soghrrsoeuhugao.to/

  • http://eiiiaoihoaeruao.to/

  • http://roiriorisioroao.to/

  • http://ouhgousgoahutao.to/

  • http://oeoaoueuoeuoaao.to/

  • http://aiaizzzezeezeao.to/

  • http://ouauooaoaoeeuao.to/

  • http://oeeoeuueueuueao.to/

  • http://eobbeaubfeuueao.to/

  • http://aauaaaeieiieeao.to/

  • http://aaaeieiiiofffao.to/

  • http://infineinfinigao.to/

  • http://baoefubfbfigoao.to/

  • http://aaauuwiifoogeao.to/

  • http://plporsiszsgetao.to/

  • http://gshrghirhgsgrla.co/

  • http://hehfaofiehgggla.co/

Wallets

  • 1L6sJ7pmk6EGMUoTmpdbLez9dXACcirRHh

  • qzgdgnfd805z83wpu04rhld0yqs4dlrd35ll0ltqql

  • Xt8ZtCcG9BFoc7NfUNBVnxcTvYT4mmzh5i

  • D7otx94yAiXMUuuff23v8PAYH5XpkdQ89M

  • 0xa5228127395263575a4b4f532e4f132b14599d24

  • LUMrZN6GTetcrXtzMmRayLpRN9JrCNcTe7

  • t1PVHo3JR9ZAxMxRXgTziGBeDwfb5Gwm64z

Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0

Signatures

  • Phorphiex family
    phorphiex
  • Phorphiex payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • ABC6E87B5F26BADF.zip
    .zip 14KB
  • 980f4f8d01c746653b3a9b7fc41be0a66d88ac7c8d7f729eb8e123f3604f38c1
    .exe 30KB

ABC6E87B5F26BADF.zip

  • SHA256 e0fa830fae317de959f388ef4c8ae19c38bb7ddbd9ab95ed76d56a1838e8b5c2
  • MD5 SHA1 SHA512 SSDEEP
Password
infected