Extracted

• • Target
    2026-08-09_1d0935077c1bbf5e5fc8b7c698abd583_elex_wannacry
  • Size 103KB
  • SHA256 3df397463002ed4c415f7a4eeb27f5020e7d8bc06c984a21137840e312312912
  • MD5 1d0935077c1bbf5e5fc8b7c698abd583
  • SHA1 a30c2fdcf1d5de5d1a90c49083bc3f9746f73526
  • SHA512 5f62cada1caa6cc9e359321edf5a3fd689b90c3b0bf7684862de237119aef82799c958aa0168bd31b5fdb3b3772623fdf2978652a52a08d890109447d6520f4c
  • SSDEEP 3072:iW5CXb4wVYlstvM6WruEPJZDQXU2M1CUci6sUJW51tQtTIRFsY:l5CLV7BWruEhZDQXU2M1CUci6sUJW51E
  • TLSH
    T17EA32A22E941C63AF06940B39BB9A9FF5D28AC31070630C3A3D46DD65AA5DE27D7025F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryevasionphorphiexloaderpersistencetrojanworm

  • Family: Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Modifies Windows Defender DisableAntiSpyware settings

    evasiontrojan

  • Phorphiex payload

  • Windows security bypass

    defense_evasiontrojan

  • Executes dropped EXE

  • Windows security modification

    defense_evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2