Extracted

• • Target

    2025-04-14_055c66efabe8a08249f361c25c268776_black-basta_cobalt-strike_satacom

  • Size

    540KB

  • MD5

    055c66efabe8a08249f361c25c268776

  • SHA1

    4e0fe1bd0268c3597f2174155b1644f26801eb75

  • SHA256

    3b3a3f2b9e4277b0a2398c052b16bcf4fd5bdddf6d5a9510d50eed2922e4909a

  • SHA512

    d9778db805d9b1946d52e07997661933f3ba50c88f25c51844e02a69f3bacffb42469d61313671a2db3b0a27b7312fb7f3ead9ad23e1f5d724c864f5924241d5

  • SSDEEP

    6144:biTqgf2uaWvLZTzkI1uIRInWa4P8I37tJbULD4VH:eTqgf2uakLV5MIRI8r/

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1