Extracted

Extracted

• • Target

    2025-03-25_abf69b35a1d70c5419e0f3319a66e4f5_mafia_rhadamanthys

  • Size

    202KB

  • MD5

    abf69b35a1d70c5419e0f3319a66e4f5

  • SHA1

    5e74b6aeee6e8b2967475de31b558afa3019c51a

  • SHA256

    3a43c6041de9b1e8f5c317c97b61cfd058e9709f811b1a77f280e0687913355a

  • SHA512

    a66fef53d03c8b9a6a931644847597ccacaac08302a5a208698f60727d443f67b59c49c9a584d971d69fd0054df5bd208f7bc37bc4274989f6f1d800224fa6ec

  • SSDEEP

    3072:5ie6EHcj8tVyZB4U55PAFJJoU10fbCN9OEM50T5/s9s:ke6EX/yf5idog0DC3Sg

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2