Extracted

Extracted

• • Target

    2025-05-20_b6066f3525576b5950b87c8e784c6ccc_amadey_black-basta_elex_hijackloader_luca-stealer

  • Size

    621KB

  • MD5

    b6066f3525576b5950b87c8e784c6ccc

  • SHA1

    4a127f3e48e26de3e244cccd74bc5997879c78be

  • SHA256

    a3581b6aee8300669a5cb254a99a3261be507e12fee62dd41657b67ada4b3997

  • SHA512

    8c889270706d5f6a066b6ffb18bfbde95c1c06a29f62898cbabd230cf17963bb352ebf3a7568b7dddb4a7b98692f5b6bbdb3b6329bdc34def7a141bfa50f61bc

  • SSDEEP

    12288:2RIBioWtRQyqAT89QmdnF/QbKQGAncr92Ig9fF6fz0U:IIBioWtRQyjIndubKQGAcr92IgZAz0

  Score

  10^/10

  phorphiexxmrigdefense_evasiondiscoveryexecutionloaderminerpersistencetrojanupxworm

  • Phorphiex family

    phorphiex

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Xmrig family

    xmrig

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig

  • XMRig Miner payload

    miner

  • Creates new service(s)

    persistenceexecution

  • Downloads MZ/PE file

  • Stops running service(s)

    defense_evasionexecution

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2