Extracted

Extracted

• • Target

    2025-05-20_4a607222e2461f8f27d4f8ca4a3ee446_amadey_elex_smoke-loader

  • Size

    75KB

  • MD5

    4a607222e2461f8f27d4f8ca4a3ee446

  • SHA1

    a9192d04e8339dbd67aaa1e27ebbb118b4b69cf3

  • SHA256

    8d5ae2959e9f3b05046956b7a6312c2b94a60312d2bed68f5963291951c19739

  • SHA512

    febd37a5fd8d8dae73b366084375dfedf96d076968d7bd52d01588cffab778c673020e209c5a3273f1a22485c0635ddd118cb69e00762645860e4c99406a9e19

  • SSDEEP

    1536:gknUfL4dXvgS3ERDxs2BUjLqA9rakeD9wo8Z5jyuK9oaOwxUs:gkILCvM7UjLqAx7Z5jyuK9ewxl

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1