Extracted

• • Target

    5a7a41b408a2fa98605015866308fca1abcebd90d1b40554f841841cb7b2768bN.exe

  • Size

    99KB

  • MD5

    b0d70de99c47f381d6edeefce3f55f30

  • SHA1

    5799909e2a4b9f4d75f5ac9255a52c47a048bdce

  • SHA256

    5a7a41b408a2fa98605015866308fca1abcebd90d1b40554f841841cb7b2768b

  • SHA512

    1a0ea5b4e7460998c51f3e27a2cebd94f01c4e27ce47212070e2e68b309d6f2d9fcdb50403a502f643ced74765fe86aa2323529c118bcc09b11e793c24d74291

  • SSDEEP

    1536:rKtU7VoIHCBk2GBKG/SDxHHfVNmiv2Kva6tMef3PtZ5OKJg/p6:rKtURRxBtsRqYvaIMWZ5OKJg/p6

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencespywarestealertrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence
  behavioral1behavioral2