Extracted

Extracted

• • Target

    2025-05-20_e14befb5fff5080aca227766ab6774bd_amadey_black-basta_elex_luca-stealer_mespinoza_smoke-loader

  • Size

    271KB

  • MD5

    e14befb5fff5080aca227766ab6774bd

  • SHA1

    c5a018b18306cb4cdb7a2e6ffb2238562eb2b9df

  • SHA256

    f0f775267974b1f2842df1904398d45e0b4b3dcba61d75ad7b8363a0396fa82a

  • SHA512

    351b0b96ac204cfa388af03a548c6b35aceb9423e252a9ca3502c0d4d25922b325c4d9ba5ee695d7bf09dee8625ff54febfc86c87339bc6dd7499997a90f349f

  • SSDEEP

    6144:z+RNmA9VF2O7NUh5+IScZPlhKfZa83TsAOI+tDbbB5/:z+jRVheh5+IScMxa83gC+RH/

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1