Extracted

Extracted

• • Target

    2025-05-20_aae23c92b77658b9598d4ade29918583_amadey_black-basta_darkgate_elex_hijackloader_luca-stealer

  • Size

    2.5MB

  • MD5

    aae23c92b77658b9598d4ade29918583

  • SHA1

    0b41ee13f79a721e5f795878b2f12bcd59669291

  • SHA256

    e91322815f7af546ae3045a9b071e47ce770bf7f38f3292b2a324ddc2cca80e0

  • SHA512

    7e5f4e5949ec6b1844ea8c2ebb5d45835028e9d3e08787f2d3bd8d9fd17c3be9977f6f3b25a76f6ff5137996abe89eb3b4b6735f56ecc2412ef96557d9c35df4

  • SSDEEP

    49152:Wt6AAgKY65kU9sQpqqgxztFGU/ipNi6OEvbT5LXTqLn9KMDS8E8:Mc3YVQpCdipNVOabsc4

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2