phorphiex | c25fb57a8d2e0c6dbed90077d45f3428194ecbb43b0188cab3c687c62e09d4e8 | Triage

Sharing

General

Target

c25fb57a8d2e0c6dbed90077d45f3428194ecbb43b0188cab3c687c62e09d4e8.exe
Size

20KB
Sample

241229-c72f5szngv
MD5

922669216b9e991b640a3f20d26ed6c2
SHA1

f295fa1d302590a494fdbce05747bfad1c9e3935
SHA256

c25fb57a8d2e0c6dbed90077d45f3428194ecbb43b0188cab3c687c62e09d4e8
SHA512

cdfb621171e14db160a199d8fe60ace60258ea1a988e78859dc55e603aad81b3c774e72372c9faa2e0ae7fcf7e6d868c5480d46cecebbf1225df3ef2b9364c89
SSDEEP

384:9+0WLc01PhLACdSUkc/ibYTJ4JVB00tySVRe:E5PhUCIU6YAvtg

Score

10^/10

phorphiex discovery spyware stealer

Malware Config

Extracted

Family

phorphiex

C2

185.215.113.66

Attributes

mutex
u8u8u8ut

Targets

- Target
  
  c25fb57a8d2e0c6dbed90077d45f3428194ecbb43b0188cab3c687c62e09d4e8.exe
- Size
  
  20KB
- MD5
  
  922669216b9e991b640a3f20d26ed6c2
- SHA1
  
  f295fa1d302590a494fdbce05747bfad1c9e3935
- SHA256
  
  c25fb57a8d2e0c6dbed90077d45f3428194ecbb43b0188cab3c687c62e09d4e8
- SHA512
  
  cdfb621171e14db160a199d8fe60ace60258ea1a988e78859dc55e603aad81b3c774e72372c9faa2e0ae7fcf7e6d868c5480d46cecebbf1225df3ef2b9364c89
- SSDEEP
  
  384:9+0WLc01PhLACdSUkc/ibYTJ4JVB00tySVRe:E5PhUCIU6YAvtg
Score

7^/10

spyware stealer discovery
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer