Extracted

Extracted

• • Target

    2025-05-18_870b9b5bb21ee1eb03866d1e0ee92c9a_amadey_black-basta_cobalt-strike_elex_hijackloader_luca-stealer

  • Size

    253KB

  • MD5

    870b9b5bb21ee1eb03866d1e0ee92c9a

  • SHA1

    eb2185dd93d61357c5aa6a0ae320a3d3b1b18f04

  • SHA256

    62a3266f5fe8ffc5ce1a1b9e0fdcf75f1fae2ad40fe5c4f3c02d406ea64abda1

  • SHA512

    3117fe660445ac01e0c272a41af6e8e2f0320ba18aad32828e4b4eff444dacc9c0c3a53032dee32b3888f93e537355641d2e4cd5fb4095f6679f1f1c7e23a21b

  • SSDEEP

    6144:tvV4ykqpI2Egr8CIp0MuaP/e6lkBLIvbR7cxI:th51Ibp0Mua+IDR7cx

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1