General

  • Target
    2026-11-05_db0900a316948af40f28ef1b25ae521d_elex_phorpiex_wannacry
  • Size 9KB
  • Sample261106-hs3csahx6v
  • SHA256 7cb6efec88171ad50acaea34c41e4c24d6091be318372221721b57014f3612d4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • phorphiex

C2
  • 185.176.27.132

  • https://download.microsoft.com

Targets

    • Target
      2026-11-05_db0900a316948af40f28ef1b25ae521d_elex_phorpiex_wannacry
    • Size 9KB
    • SHA256 7cb6efec88171ad50acaea34c41e4c24d6091be318372221721b57014f3612d4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks