Extracted

• • Target

    2025-04-13_7b9ebbb65e14348f8cdfe321d8de3336_amadey_elex_smoke-loader

  • Size

    1002KB

  • MD5

    7b9ebbb65e14348f8cdfe321d8de3336

  • SHA1

    8f30dc1523b13b427a73bfef8ffeecead91ba9c8

  • SHA256

    f71a60f5e72e725d5dcda6bab40d53fb9ad881fb83bb9395d66c889f2d5669e4

  • SHA512

    18438dab380d0fc7f238d49fb6f3fa4cb6507c82cc3039c874730cac89d1ca6425c542eefbac979c636848d7081753d865e4b21dd4f71c9c377f97a53274cb30

  • SSDEEP

    12288:lr0UR9h0BN3J05wRWGBgbib5J79QvjlDjMzVkpSHNl2J:lr0URPEJ0sg+9kqVkpSHeJ

  Score

  10^/10

  phorphiexdefense_evasiondiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Checks whether UAC is enabled

    defense_evasiontrojan
  behavioral1