Extracted

• • Target

    2025-04-15_caa4af4a68f03614c4aad8d77806e922_amadey_elex_smoke-loader

  • Size

    216KB

  • MD5

    caa4af4a68f03614c4aad8d77806e922

  • SHA1

    56c9c4f29a00788054366bb3bd3698da996ceb45

  • SHA256

    de590a9b892f33375bfb945ea4f1d13d7db2a62cc17c65cb23c8d097806e647d

  • SHA512

    7917ae409a944347f38943dcd15ee219ff24f3737e916a05b523a1c642142aabedb3372ea817ac8a73407dfedf6cad86dffb883c5eda63679448bde58df1b708

  • SSDEEP

    3072:nZ2n8SBy7zu3HXe7tmX7xhVQOIiU3MJ2C3z5V7liLBMvZ8RAlhmw:ngU7zmucLxrQd38z3hiLwUw

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1