Extracted

• • Target

    2025-04-14_2295ccac10bf234eab08bb9af7d69f87_black-basta_cobalt-strike_satacom

  • Size

    252KB

  • MD5

    2295ccac10bf234eab08bb9af7d69f87

  • SHA1

    51575f827505c3327fcd66dc02abe3a7fc951609

  • SHA256

    d7a717dc0ed16df7acb2ccd8d5fbaf49c995894e6ff89c11c6f0f6167cb2dbf6

  • SHA512

    296fe95f5b837922b6a2c98e245124b04a36906a3d58191690cf930b399bd61314f43ca97336a69a7a82ddda918931755d24e0d4d32058773a32b24ed82ccf9d

  • SSDEEP

    3072:aqX9DaAu1+2Oaz9Tzj7Ay1zDZsx9Wkc/aAIXan4Xp0GEAp32Q6UTykn2XN:aoDaAH2Oa1v75zDZQF+IKn26dtm29

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1