Extracted

• • Target

    2025-04-14_3a3c73a58d90a4f9327161f638fcb748_black-basta

  • Size

    162KB

  • MD5

    3a3c73a58d90a4f9327161f638fcb748

  • SHA1

    f2ee5af60a9fdd31507e47c1e06b165eef474ce1

  • SHA256

    90341c93b81dac4fda86c1059e98d2c8ca4c78ecbe74deb44ee88518fa9cd2bc

  • SHA512

    f74f8867099a3698d3a21372f9c47a7b1ae28de0b446673325fe0ac3f91945d90af885cdf935143ea1f1ae08842f82c0085976bbd89537f0a36bc8a3c69b6454

  • SSDEEP

    3072:Q982i0/16CUicomL0yAktZpN/hLXVzYZAs0y6Olm:QviGR/c0yvZpuFdI

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1