file
Classification: Malicious
file is a malicious file sample. Reported by 4 threat sources, last seen 2026-09-02. IoC context and downloadable threat intel on Maltiverse.
Detection summary
- 0 antivirus detections
- 21 IDS alerts
- 0 processes observed
- 32 contacted hosts
- 32 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Maltiverse Threat Observatory | 2026-05-25 06:25:07 | 2026-09-02 17:00:13 | malicious-activity malware | |
| Generic Malware | Hybrid-Analysis | 2026-05-25 04:45:06 | 2026-05-25 04:45:06 | ||
| Phorphiex | Triage | 2026-05-25 03:39:16 | 2026-05-25 03:39:16 | malicious-activity | |
| Phorpiex | MalwareBazaar Abuse.ch | 2026-05-25 03:30:54 | 2026-05-25 03:30:54 | malicious-activity |
Tags
phorphiex discovery loader trojan worm malicious suspiciousSample information
- Filenames
- file, 0d8748a987fb0daed81fab33fa2b1975ab58680b76c53710107feee63fee1379.bin, _0d8748a987fb0daed81fab33fa2b1975ab58680b76c53710107feee63fee1379.exe
- File type
- PE32 executable for MS Windows 5.00 (GUI), Intel i ...
- MD5
3744e711b324f9384b91a8d042ee0a1d- SHA-1
847939891db38ddc4c0015d8fb348d22359163ca- SHA-256
0d8748a987fb0daed81fab33fa2b1975ab58680b76c53710107feee63fee1379- First indexed
- 2026-05-25 03:30:54
- Last updated
- 2026-09-02 17:00:55
Network contacts
67.195.204.74 104.16.185.241 130.12.180.190 99.81.80.180 188.125.72.73 80.12.26.32 203.138.181.112 217.74.65.64 74.208.5.20 124.83.237.242 108.179.194.68 202.131.24.29 213.209.1.129 154.18.236.99 20.157.67.142 47.251.66.253 192.178.223.26 165.227.159.144 212.77.101.4 108.177.123.27 47.43.26.7 67.195.228.86 52.101.8.43 212.227.15.17 77.75.77.42 103.86.78.3 98.137.26.68 77.75.77.90 207.54.80.150 34.141.161.132 173.194.76.27 194.152.32.72
DNS requests
0pppp.com 126.com 126mx03.mxmail.netease.com 163.com 163mx00.mxmail.netease.com 1webmail.gdn 21cn.com 50yumi.com 76dex.php 99.c.om ALT2.ASPMX.L.GOOGLE.COM ALT3.ASPMX.L.GOOGLE.COM a.mx.gtt.smail.eu a1121.mx.srv.dfn.de aakashicampus-com.mail.protection.outlook.com aakashicampus.com aanet.com.au abc-sa.com.ar abcsa-com-ar0i.mail.protection.outlook.com abonc.com absamail.co.za abv.bg abyssmail.com acadsoc.com.cn acor.de adam.com.au adelaide.edu.au adelphia.net advance-it.gr advanceit-gr01i.mail.protection.outlook.com aeiou.pt aerconditionatservice.ro