Extracted

• • Target

    2025-05-17_41eb0b74281580cf6b30539bfcb3cc9d_amadey_elex_smoke-loader_stealc_tofsee

  • Size

    1.3MB

  • MD5

    41eb0b74281580cf6b30539bfcb3cc9d

  • SHA1

    d6b39737670707d56572e0b2a91d0514d4a78be7

  • SHA256

    85632ca2bcbad0d652167cf81c5b6f510ff90ee4c1f1b7c216cb1ec1fdf222c5

  • SHA512

    ccc0f042a1c442623908d3b93516e5d7f489693e72e12106f9ec2a0d0103be778738c78b5caab6e2b07c41b4490d7f19c6267dab9f0e3b608ce94df8e3479c24

  • SSDEEP

    24576:NGHL3siy9LluSmtLvUDSRbm4Jah1rVxXmBz5px03LG5gPMmtM5KoZm6/ZcCU:yL3s7p9eTUDBzrVxofxAG55o6/CC

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1