General

  • Target
    2026-07-12_2bc2acc7e2f5ec4b26ecdb179f73c95e_akira_icedid_luca-stealer_njrat_stealc
  • Size 1.4MB
  • Sample260712-q6wfdsa14k
  • SHA256 9038263937c33c356c7c4b8e8872ec9db1343e6fb95b7c0433c74c3f4df2eeec
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • phorphiex

C2
  • http://178.16.54.109

Targets

    • Target
      2026-07-12_2bc2acc7e2f5ec4b26ecdb179f73c95e_akira_icedid_luca-stealer_njrat_stealc
    • Size 1.4MB
    • SHA256 9038263937c33c356c7c4b8e8872ec9db1343e6fb95b7c0433c74c3f4df2eeec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Phorphiex, Phorpiex

      Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks