General

  • Target

    9dc0b007f33f768fff2249388428981d89cfcee3e5babd206bbaeb7d5cc34b4fN.exe

  • Size

    11KB

  • Sample

    241128-3yc1asvpf1

  • MD5

    83a784716728ca579619d0e13a9f17b0

  • SHA1

    5e33ca9dab3c0df2edcd597b8b0da06c88f18f6b

  • SHA256

    9dc0b007f33f768fff2249388428981d89cfcee3e5babd206bbaeb7d5cc34b4f

  • SHA512

    f8218a8e977f0ec340e7139041cfff8bac4cc23bcea0c0c0d7717ead76093d45d10acd72a5846486e9348ce642f529824f1575d0d28b8d2f566c543c7c9d3bc4

  • SSDEEP

    96:ETwSV536ceoPr3mrAdFDbv1SuAIULiVK+YkJxGE9btz2qhRC7tCEX:di53VeoJ1SJ6JxTZtzthy

Malware Config

Extracted

Family

phorphiex

C2

http://185.215.113.66

185.215.113.66

Targets

    • Target

      9dc0b007f33f768fff2249388428981d89cfcee3e5babd206bbaeb7d5cc34b4fN.exe

    • Size

      11KB

    • MD5

      83a784716728ca579619d0e13a9f17b0

    • SHA1

      5e33ca9dab3c0df2edcd597b8b0da06c88f18f6b

    • SHA256

      9dc0b007f33f768fff2249388428981d89cfcee3e5babd206bbaeb7d5cc34b4f

    • SHA512

      f8218a8e977f0ec340e7139041cfff8bac4cc23bcea0c0c0d7717ead76093d45d10acd72a5846486e9348ce642f529824f1575d0d28b8d2f566c543c7c9d3bc4

    • SSDEEP

      96:ETwSV536ceoPr3mrAdFDbv1SuAIULiVK+YkJxGE9btz2qhRC7tCEX:di53VeoJ1SJ6JxTZtzthy

    • Phorphiex family

    • Phorphiex, Phorpiex

      Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks