Extracted

Extracted

• • Target

    2025-05-19_205802ce966ce66d0ffab32968d29284_black-basta_cobalt-strike_satacom

  • Size

    3.9MB

  • MD5

    205802ce966ce66d0ffab32968d29284

  • SHA1

    a57d2f20c8f77e565ab050a4c7d6da1283030ff7

  • SHA256

    9466db73a9b8cf747ea3d63bf67460e1e5414d718683cd636d39f40c391448ba

  • SHA512

    6e2e0eb6fd19c0bc2d7715457fdf88008899a6bca1112231f1081d6e09c36a48fe8ca6a8d71e397044e981c61affecc0152f9b69e9cbd8d443e0c20d4f40e121

  • SSDEEP

    49152:95KfQdTE6pY6WyCE4j+8B/c5KgGROaKt:+Qdw6u0jKgs

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2