phexia | 785ac6218385ba2edfe75188f1e988a77bf12a107a4745f29e43545b61ef7867 | Triage™

Login
Reports

Overview

overview

Static

static

785ac62183...ef7867

macos-10.15-amd64

5

Resubmissions

25/09/2026, 15:18

260925-sprf8avve110

25/09/2026, 15:17

260925-sn4edsvvet10

Sharing

Copy URL Twitter E-mail

General

Target
785ac6218385ba2edfe75188f1e988a77bf12a107a4745f29e43545b61ef7867
Size 16KB
Sample260925-sprf8avve1
SHA256 785ac6218385ba2edfe75188f1e988a77bf12a107a4745f29e43545b61ef7867
MD5 abd9b4e73f10d09ccb5782b400a82766
SHA1 eb0d7c190c9de66f012874e9f9516ce314e7fabe
SHA512 f6fb96577f247e0c6f39e9bf5bac7325c70fc496be71c4626e1314a47f76c2b74d4c8bfa030619bbebc5815678ee78d71dc87ce7969a55caf6933cc31977618e
SSDEEP 192:8HYUmsxddw8PggLwwaPg1hFHxYwr1zyGhti8XjyPYq/8HxwHF9o49shqDclo:jUZdyM1xhF1Sl9+8
TLSH
T16872A6AD5F60F9D85615052B28F20D493721C17BE2AC16BFB9CF73260E5E53C9E8D812
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

phexia backdoor execution macos persistence

Static task

static1

2 signatures

backdoor phexia

Behavioral task

behavioral1

Sample

785ac6218385ba2edfe75188f1e988a77bf12a107a4745f29e43545b61ef7867

Resource

macos-20260915-en

macos-10.15-amd64

3 signatures

150 seconds

execution persistence

Malware Config

Targets

- Target
  785ac6218385ba2edfe75188f1e988a77bf12a107a4745f29e43545b61ef7867
- Size 16KB
- SHA256 785ac6218385ba2edfe75188f1e988a77bf12a107a4745f29e43545b61ef7867
- MD5 abd9b4e73f10d09ccb5782b400a82766
- SHA1 eb0d7c190c9de66f012874e9f9516ce314e7fabe
- SHA512 f6fb96577f247e0c6f39e9bf5bac7325c70fc496be71c4626e1314a47f76c2b74d4c8bfa030619bbebc5815678ee78d71dc87ce7969a55caf6933cc31977618e
- SSDEEP 192:8HYUmsxddw8PggLwwaPg1hFHxYwr1zyGhti8XjyPYq/8HxwHF9o49shqDclo:jUZdyM1xhF1Sl9+8
- TLSH
  T16872A6AD5F60F9D85615052B28F20D493721C17BE2AC16BFB9CF73260E5E53C9E8D812
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution persistence
- Launch Agent
  Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

AppleScript

System Services

Launchctl

Persistence

Create or Modify System Process

Launch Agent

Privilege Escalation

Create or Modify System Process

Launch Agent

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistence

© 2018-2026

Terms | Privacy