Extracted

• • Target

    2025-04-14_b2c1828fdbaca11aa1d1bc1711f08631_amadey_black-basta_cobalt-strike_elex_luca-stealer_smoke-loader

  • Size

    212KB

  • MD5

    b2c1828fdbaca11aa1d1bc1711f08631

  • SHA1

    cc9b7e5ee9e07d811b2a162dc7fc8ed2d083eebe

  • SHA256

    46912e077b61138c86475b25f4461037413f31b0d5bd673a2c6f66c52b5df5ad

  • SHA512

    f456cb0ef38e437ae17c5ca66296b705c0efebd969f3fe02fa5ed43ba75d5189e7b759486d357482cf1e02c86ecb1d9d0293a11a671c9b5fb7c45cfa57f49cbd

  • SSDEEP

    3072:I+IzqZVwwuUtUnyVCG/+wjqYLV1ydG7w9TV6zUsdAy3EqbyuAg0FujxAqr0WK:Xewu3K//jqY/yM7wpYzUy1lAO1v

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1