Extracted

Extracted

• • Target

    2025-05-20_1bc349d5496b21cd8fa787d0a889d3b5_amadey_black-basta_cobalt-strike_elex_hijackloader_luca-stealer

  • Size

    590KB

  • MD5

    1bc349d5496b21cd8fa787d0a889d3b5

  • SHA1

    3ee43b0e881c8279419f66af25381d6c6656cac5

  • SHA256

    42b50103d3443d04d8c72f33b56093491e4aff92faf6273fd59fe482f6095a5b

  • SHA512

    540f7ef117c21074197e9e26c299865fdb76647d7c49bda86f799cf216f66e7c878bdee19f509b9cb60046d3c6904748feee33306dcd0a4eb3f59902fb861440

  • SSDEEP

    6144:7FvwcEuCOpzrZueS8j+W9yWduwwVbHEM++R3vshER0u+GIIIIIIIhIIIIIIIIII4:pvwcO+Zuej6oduRy+3m55Vs

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1