Extracted

• • Target

    2025-05-18_926e84ab7cab9801a95e6467150ea839_amadey_avoslocker_black-basta_cobalt-strike_elex_hijackloader_luca-stealer

  • Size

    435KB

  • MD5

    926e84ab7cab9801a95e6467150ea839

  • SHA1

    8221276d18b380f8e3d56b68b23b44248bb4d3c6

  • SHA256

    2be5b56db72e4f911073af1911ecf4cf947f5aa66d75758443c12b33298d0aca

  • SHA512

    2d249c7e85c73f40b08b2f08ba5577eb2798d72c441fa15da93314ab0c665fc144a1126796482ce89a78e116e0efe6a3ee47a737897b29bd9c16fe723579c586

  • SSDEEP

    6144:/y9vGVBpyPgAZrDw6SZkMNpEa0X5wy5U+XQaZAOFBCwqwqwGlHntfwlaR48:kGVBpSZrDw6SZkMNp1rMQGrBuNon8

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1