Extracted

Extracted

• • Target

    1bc2490125acbce44d06584d30eb18b9c463a2edabcbf64c4833818b1e8ec34dN.exe

  • Size

    304KB

  • MD5

    518d4abf2f3db90e344974fcd7e4a920

  • SHA1

    504143ba1d87f8aceb7a40601b0ccf4fb1bb3d2d

  • SHA256

    1bc2490125acbce44d06584d30eb18b9c463a2edabcbf64c4833818b1e8ec34d

  • SHA512

    23ec8e3df31df0629d40dc8d353e199bc537945afc5e3f5f0c0cdd50d1e43dbe9c22122ef4e35fc8b42e2c4f2c677f9b30b5cd99dbbe2d5e748cc475e1312128

  • SSDEEP

    6144:yEhYF7KR+Rr0DKwIb8IgUo7xFyAOjqjKSEIt5A:yYEKRsr0DKLDEyNmKSW

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencespywarestealertrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence
  behavioral1behavioral2