Extracted

• • Target

    2025-04-14_93d2c946a17daff942967db7cbd2f10b_black-basta_cobalt-strike_elex_luca-stealer

  • Size

    201KB

  • MD5

    93d2c946a17daff942967db7cbd2f10b

  • SHA1

    4ec8adc121dcbcf698fc5314c3bf7ba4aa4b4fe9

  • SHA256

    09b8490826c6c7e8dbe198bc366d856d72686a8ab714b37c6c6add660ad648cd

  • SHA512

    371cb0be6b19f6584eb738bf6a8ba6f3c330055d4ca6ba96fed7b79f788741bfbec23de62b2f92730018c4bc92ab247e1d32fc75d301e9e5e28b4b5bae2dc01e

  • SSDEEP

    3072:lBCMHTzBmRFUbvcHmB/u16YG22TmKieYoYvV7HFUFhUl1MZPX:lb5mvU7lu0pdMoAV7HFsc1SX

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1