Extracted

Extracted

• • Target

    2025-04-14_a1e534fa9913963f6fce286bac5be4be_black-basta_cobalt-strike_satacom

  • Size

    270KB

  • MD5

    a1e534fa9913963f6fce286bac5be4be

  • SHA1

    42d5f4a9a99c087911c1d834c7ed39bf552afd69

  • SHA256

    74eb7465dddafcb526b4e608fc339105c7db0b7df25bdb7d55db2388bdc3b0a5

  • SHA512

    46e173b5ad06e9bf9e691d1828f2110c66d31807242626f09563dd7fc2bb9d9f2430836c0850d15453eb50e9e151db57d32ebde0852b1415f125f0048bd3ba7d

  • SSDEEP

    6144:CBb2b+Q1LJoYm6iAMpQznohTMmXOw7dez:Q2b+bYm8MpQznoFMTwBu

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1