Resubmissions

25/09/2026, 15:18

260925-sprf8avve110

25/09/2026, 15:17

260925-sn4edsvvet10

General

  • Target
    785ac6218385ba2edfe75188f1e988a77bf12a107a4745f29e43545b61ef7867
  • Size 16KB
  • Sample260925-sprf8avve1
  • SHA256 785ac6218385ba2edfe75188f1e988a77bf12a107a4745f29e43545b61ef7867
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: Phexia

    Phexia is a macOS AppleScript backdoor that resolves its C2 through a dead drop resolver and executes operator-supplied osascript modules.

  • Detects Phexia loader 1 IoCs

File Explorer

  • 785ac6218385ba2edfe75188f1e988a77bf12a107a4745f29e43545b61ef7867
    16KB

785ac6218385ba2edfe75188f1e988a77bf12a107a4745f29e43545b61ef7867

  • SHA256 785ac6218385ba2edfe75188f1e988a77bf12a107a4745f29e43545b61ef7867
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects Phexia loader