phorphiex | 7eb1218558704574453ee3266acdb04fa2ba1ef14bd62ce41a36b966d87505aa | Triage

Sharing

General

Target

7eb1218558704574453ee3266acdb04fa2ba1ef14bd62ce41a36b966d87505aa.exe
Size

20KB
Sample

250120-e4jg9s1met
MD5

3c4872c469f01e2dd22eb205c260a311
SHA1

a163153290a0159e40e54a01f3caecfbc5a204d8
SHA256

7eb1218558704574453ee3266acdb04fa2ba1ef14bd62ce41a36b966d87505aa
SHA512

40aaca6bf7fe8ae6408e90126ca4748a1b70e8cad0236896024a440d60093ef75d33e0d2476a39519543d3c73c9f74de473b5d37bc9c5c847057baff2b7163fb
SSDEEP

384:Dj0WLc01P8PZxpo85/UkY/ibYTJ4JVB0Th5cMSTRy:15P8Pq81U+YAIh5c

Score

10^/10

phorphiex discovery spyware stealer

Malware Config

Extracted

Family

phorphiex

C2

185.215.113.66

Attributes

mutex
xx786x688x-

Targets

- Target
  
  7eb1218558704574453ee3266acdb04fa2ba1ef14bd62ce41a36b966d87505aa.exe
- Size
  
  20KB
- MD5
  
  3c4872c469f01e2dd22eb205c260a311
- SHA1
  
  a163153290a0159e40e54a01f3caecfbc5a204d8
- SHA256
  
  7eb1218558704574453ee3266acdb04fa2ba1ef14bd62ce41a36b966d87505aa
- SHA512
  
  40aaca6bf7fe8ae6408e90126ca4748a1b70e8cad0236896024a440d60093ef75d33e0d2476a39519543d3c73c9f74de473b5d37bc9c5c847057baff2b7163fb
- SSDEEP
  
  384:Dj0WLc01P8PZxpo85/UkY/ibYTJ4JVB0Th5cMSTRy:15P8Pq81U+YAIh5c
Score

7^/10

spyware stealer discovery
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer