Extracted

• • Target

    2025-04-14_c156cdaaf7f7ecd5afb6fc2587444069_amadey_black-basta_cobalt-strike_elex_luca-stealer

  • Size

    448KB

  • MD5

    c156cdaaf7f7ecd5afb6fc2587444069

  • SHA1

    c2e29803471b0bdae600c5ac70ccfa0b93963660

  • SHA256

    3619a9768946a4627417ff89e6d2e125a0ab9e17db8f3b4fe26e922dfde46aa8

  • SHA512

    ebe75066cc3871f475d6275661a865fd4ad023f40268d18efb572a419ea7f7f8517ec26eae8ee7834a0e61f119fb2539ef7ecd3ec85759c74cfe878d269e31f4

  • SSDEEP

    12288:SuO82S7pvN0DGtEYVBLQnVrrWr7cJkgNL0FcX4U:yHS1vN0DGtCVnNUW4U

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1