Extracted

Extracted

• • Target

    2025-05-20_619058b4811ef2d1655a9d527f95999e_black-basta_darkgate_elex_luca-stealer_mespinoza

  • Size

    478KB

  • MD5

    619058b4811ef2d1655a9d527f95999e

  • SHA1

    6316e02e85ffa14661e634d3a35fd3f30d9effd8

  • SHA256

    afdc556e8db0ab8f8e3a81487f9da8944fb9c965561fc78bb123f4b013cf6109

  • SHA512

    8ea37d91cce08045bc92c11289b051f626fe429aab8560ef13d3204602510973e6eff8221bb774756896af1280490dfe1afd2e2a0a197591b0007dca1da70e24

  • SSDEEP

    12288:AihymZoL1gGkUJe/pRCvsclNZZBYEkA1ErufVL50:AiZoLeGde/pRcBZqA1ErOL50

  Score

  10^/10

  phorphiexdiscoveryloaderpersistencetrojanworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2