Extracted

Extracted

• • Target

    2025-05-19_25463f79e21e27138373421cd7bdea42_black-basta_cobalt-strike_hijackloader_satacom

  • Size

    350KB

  • MD5

    25463f79e21e27138373421cd7bdea42

  • SHA1

    67aee5b6f576554cd0de5aeb6ae178255e8c9c38

  • SHA256

    b67483bf0d1b04a7b19efec84bc693478528ac31680910accf5416b2202e1934

  • SHA512

    a6e35e0ac9da94fbb32521f3e674990155bb443688fc0ddaea3ed0d5bf30521b8e5b239bafa13fe4807c988d46fce84d687385e6d5f90220c6c792d5ce962361

  • SSDEEP

    6144:WRbJxH5LREs71nFuv8kyFJCEU/FGquohkg91DK:sxLKu1UaFJCEF9oJe

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2