Extracted

• • Target

    2025-03-10_8c5d60fbed2b0256cc3c9ab3ff0dbdde_ryuk

  • Size

    286KB

  • MD5

    8c5d60fbed2b0256cc3c9ab3ff0dbdde

  • SHA1

    fe9571922d8f65d609b309f55f891666d5538e6b

  • SHA256

    cfa1b2d87e208d0343c43496b6d41558942a8639e0ac34de1b3761a1cfbdb951

  • SHA512

    8b6a51f53613c597fcc43af0147124828bfdd9f5c2c6dd0c60772f3a511b9c989b8ef888d4e950109bf1049e29dda1a2601eb5d5150f37b8cccaba4541d69499

  • SSDEEP

    3072:VIEQef2xyLHUTmCqvDO0Od6NBZNnUhAYZJj3hLKKKKKU8AAFTbp8ELQHsoOJNuYc:rQB47UFq7O16NBZNDkofJXnIZR1

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2