phorphiex | 622bda80fb2ea6f132ff3efe37bae181b4acd0f182ae116682dcb9e6348cc26a | Triage

Sharing

General

Target

ev.exe
Size

16KB
Sample

241130-a7pfgavlby
MD5

56c16aff11b467b005d11b493defbe4c
SHA1

ab7b8c80eeee91de84c1c3c3886fb18a826f1bad
SHA256

622bda80fb2ea6f132ff3efe37bae181b4acd0f182ae116682dcb9e6348cc26a
SHA512

5075f7e197b7726514e85124644442a2010d2566338fdc4b787ed74f933b83490cadcc42776282b19808f14c402ca0bdc4c3d172385b4abf418bb38dda9b3ec9
SSDEEP

192:FlSkyHv47AylNTkBr8NeFBzTvtm2F/SzbFJxTjmFpBnE:b/6vVylNXMjtm2FWF3u

Score

10^/10

phorphiex defense_evasion discovery evasion trojan

Malware Config

Extracted

Family

phorphiex

C2

http://91.202.233.141

Targets

- Target
  
  ev.exe
- Size
  
  16KB
- MD5
  
  56c16aff11b467b005d11b493defbe4c
- SHA1
  
  ab7b8c80eeee91de84c1c3c3886fb18a826f1bad
- SHA256
  
  622bda80fb2ea6f132ff3efe37bae181b4acd0f182ae116682dcb9e6348cc26a
- SHA512
  
  5075f7e197b7726514e85124644442a2010d2566338fdc4b787ed74f933b83490cadcc42776282b19808f14c402ca0bdc4c3d172385b4abf418bb38dda9b3ec9
- SSDEEP
  
  192:FlSkyHv47AylNTkBr8NeFBzTvtm2F/SzbFJxTjmFpBnE:b/6vVylNXMjtm2FWF3u
Score

10^/10

defense_evasion discovery evasion trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Modifies Windows Defender notification settings
  evasion trojan
- Modifies security service
  evasion
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Modifies Security services
  Modifies the startup behavior of a security service.
  defense_evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryevasiontrojan

behavioral2

discoveryevasiontrojan

behavioral3

discoveryevasiontrojan