Extracted

Extracted

• • Target

    2025-04-14_fcd6d51008ba9fd6961f4128351fd571_black-basta_cobalt-strike_poet-rat_satacom

  • Size

    1.8MB

  • MD5

    fcd6d51008ba9fd6961f4128351fd571

  • SHA1

    40b4ce6dde8c90b05243255a157580a3004e9e3d

  • SHA256

    a1fba469a73ccc279b2dd1c97659d2989b6a37f5198d4ebba7352efbe213a21a

  • SHA512

    b45e284882d2297d168beee679dd6d53abd149ffb6069e3aa64d5868efa6de94c41e7d955d82e3f80a7e2df664f2b7ba68b3ee7a160cb25d31f1dbf83577bb42

  • SSDEEP

    24576:GlugEaxGdHHBoGzc4Qlj89+8NPvW8WEdNXBilrfSfdWJeE+CBfo31j8i61505PW:QuHaxGNhoGzjQeJdNohSfdWoExBe1L7E

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1