Extracted

• • Target

    2025-04-15_8f75724c86fc41118a54cf0829d075dc_amadey_elex_karagany_rhadamanthys_smoke-loader

  • Size

    141KB

  • MD5

    8f75724c86fc41118a54cf0829d075dc

  • SHA1

    fb3736c0dde824ffa6fb07a28b2baeef6e40f640

  • SHA256

    7d1be998be471dfc616ad3b94f1871e955c3b501b581779a989ff4e11328740a

  • SHA512

    5132b550de792a8a4328b9b6fcb93c0aa236dcbd6098bf58df5a91c85e03937677029744152743c6ec0998f0adb41896606f6eaae7f222aacee1f688948282bb

  • SSDEEP

    3072:stFzMf2ygU0qbVk5UCGlasxPXwXJkvW2iLRaj+rVT+Pa/E:sQfeU0qbVmAWdCP

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1