Extracted

Extracted

• • Target

    2025-04-14_dc21022cefe95c052128d1d780a2e7ec_black-basta

  • Size

    162KB

  • MD5

    dc21022cefe95c052128d1d780a2e7ec

  • SHA1

    ff8d7011cbe1dff390c810cdca61b781a5481445

  • SHA256

    80c50182852099394460bcccb34073d0e0ead4cee616aed56a787ef74f6b0ddc

  • SHA512

    82c00b41569a65169ac5e246a02eb8c4b06e3fe2cd168fa7efb9caf8282f05e85097bdbc35a5f994cc84d0957bf724223f9057c5ac299ff9d4b744b48dfe4ce5

  • SSDEEP

    3072:Q982i0/16CUicomL0yAktZpN/hLXVzYZAs0yRvY:QviGR/c0yvZpuFRA

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1