Overview

overview

10

Static

static

10

980f4f8d01...c1.exe

windows7-x64

10

980f4f8d01...c1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ABC6E87B5F26BADF.zip

  • Size

    14KB

  • MD5

    6a0bc4c826b94696519cbbb1a272932c

  • SHA1

    f6586e6cd250fa0847b9d886110b230f5edf3523

  • SHA256

    e0fa830fae317de959f388ef4c8ae19c38bb7ddbd9ab95ed76d56a1838e8b5c2

  • SHA512

    056052bd6df060129f32905ddbe2855390bda31a198b36eb99137347eb6b8fbb6cc9a48bb0ee478f19287cc19d7971c1381ba851622763ab0e2e86cf4d45ca83

  • SSDEEP

    384:cf8937sWkygPO0/TJgTroyqHGr8dQWnEhwYgv:cf8JYGEgHot2gtEhwYgv

Score
10/10
phorphiex

Malware Config

Extracted

Family

phorphiex

C2

http://b0t.to/

http://gshrghirhgsgrao.to/

http://hehfaofiehgggao.to/

http://soghrrsoeuhugao.to/

http://eiiiaoihoaeruao.to/

http://roiriorisioroao.to/

http://ouhgousgoahutao.to/

http://oeoaoueuoeuoaao.to/

http://aiaizzzezeezeao.to/

http://ouauooaoaoeeuao.to/

http://oeeoeuueueuueao.to/

http://eobbeaubfeuueao.to/

http://aauaaaeieiieeao.to/

http://aaaeieiiiofffao.to/

http://infineinfinigao.to/

http://baoefubfbfigoao.to/

http://aaauuwiifoogeao.to/

http://plporsiszsgetao.to/

http://gshrghirhgsgrla.co/

http://hehfaofiehgggla.co/
Wallets

1L6sJ7pmk6EGMUoTmpdbLez9dXACcirRHh

qzgdgnfd805z83wpu04rhld0yqs4dlrd35ll0ltqql

Xt8ZtCcG9BFoc7NfUNBVnxcTvYT4mmzh5i

D7otx94yAiXMUuuff23v8PAYH5XpkdQ89M

0xa5228127395263575a4b4f532e4f132b14599d24

LUMrZN6GTetcrXtzMmRayLpRN9JrCNcTe7

t1PVHo3JR9ZAxMxRXgTziGBeDwfb5Gwm64z
Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0

Signatures

  • Phorphiex family
    phorphiex
  • Phorphiex payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ABC6E87B5F26BADF.zip
    .zip

    Password: infected

  • 980f4f8d01c746653b3a9b7fc41be0a66d88ac7c8d7f729eb8e123f3604f38c1
    .exe windows:5 windows x86 arch:x86

    Password: infected

    f6eb365b415d52c68fde9779f25c6573


    Headers

    Imports

    Sections