Trojan.Phorpiex.C
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Popularity Rank: | 4,365 |
| Threat Level: | 80 % (High) |
| Infected Computers: | 1,286 |
| First Seen: | December 14, 2012 |
| Last Seen: | April 23, 2026 |
| OS(es) Affected: | Windows |
Table of Contents
Analysis Report
General information
| Family Name: | Trojan.Phorpiex.C |
|---|---|
| Signature status: | No Signature |
Known Samples
Known Samples
This section lists other file samples believed to be associated with this family.|
MD5:
d3a570cef3e0ff364e306b7885f8b9ff
SHA1:
0dee08787d5104153d84afaa7aee29c1dd3a6e08
SHA256:
3F9885244A3C95D3C5C6D3C3D3EE222428C3F75F41E3CDE7F89E6B6CFE6CD921
File Size:
19.97 KB, 19968 bytes
|
|
MD5:
dbb6d10674dd1baa9e697cc6ab4eec53
SHA1:
db1194ba8e15132460d96dff0dbd90eb4a11c61b
SHA256:
5EE7AAF2C8238F6AE3E6EAF3F9CF1E79246B5F920E69B9C5FD30BFC238F83144
File Size:
19.97 KB, 19968 bytes
|
|
MD5:
c85f7c4121f19bb4be9aef671e9c691d
SHA1:
420d46eec3c94545858c2a625ec62cf2e5613f7f
SHA256:
924389139F99BD37A17B8226D2C38590F64E02D99E01EF4FD9718827719720EC
File Size:
18.43 KB, 18432 bytes
|
|
MD5:
e7e955ac85bc6cf49ce677d57d86f3b3
SHA1:
74fa14c2a751ec23c1ee0cce1f66f5225c24a1e0
SHA256:
3A2DCD6C86A8B789C5F07EEC531FD9A3D9268288D8CF47E9F324DACD55BB6CFC
File Size:
18.43 KB, 18432 bytes
|
|
MD5:
738a0a77839c22e11e4d7b772958bb26
SHA1:
149cfcc1ddb77e4d3fafdad7295aeca7107d7a94
SHA256:
74FCF1E27180D840B8DE78EC4CFBB48E5B7A43F13C579C9AFBEF17FC2B47AC02
File Size:
18.43 KB, 18432 bytes
|
Show More
|
MD5:
be24fe7d9f5b3cbb3cd3980b0320460c
SHA1:
78bc32990a42124d712a0688285b4bbad0194959
SHA256:
18B0A373FEE639AFEC0052399177599F32F4B70BCFECC5AE0A34D82E400310A1
File Size:
18.43 KB, 18432 bytes
|
|
MD5:
9ed4c94e181c43ad603b789382d8e5d3
SHA1:
6827e355ed6f2a5a14c7e1f49e111ff8f8d079c2
SHA256:
D2BA9777E8D8415B5B9361571C7FA3B6F12303C3F81738A23B66CE258CF025BB
File Size:
18.43 KB, 18432 bytes
|
|
MD5:
69436b51605c866c2954b58551d3c24a
SHA1:
4614777310d0226c3eb793798163619a39383bbb
SHA256:
EAAF0D9CC90668AFB54648F31900D1BFA1D246BE9D42F3DA32508DDEE213F932
File Size:
22.53 KB, 22528 bytes
|
|
MD5:
d0e8673724f4f1700715026fe795820a
SHA1:
ad5aeb9cf077cb5e679c6eb84fe8938c2645be5e
SHA256:
9D55DB8A78127933DEAF09E7BC5F293E506F28AC673EBE597FCA92BD6088E26D
File Size:
22.53 KB, 22528 bytes
|
|
MD5:
a9203e947614ec06570b5753edfc1b68
SHA1:
b64bb5e5fb565e9f59777ef5025e2bb25a98eb96
SHA256:
153C1BBFCE8FCF4D644A8B7A3843E92E30239D977EB9F4BB21CCA7765E48B10D
File Size:
16.38 KB, 16384 bytes
|
|
MD5:
ba71ce182c5571808af70af0cc01065d
SHA1:
a6f0a407c2c7fe22e1b1dde85b4c663dec100b61
SHA256:
D2B94DB6CB08E2B659D81E7746D669D09E70AE5D3BD675A011ECED94AD66A7E0
File Size:
18.43 KB, 18432 bytes
|
|
MD5:
68d6854be016247e0b20de5cc148e9a3
SHA1:
a634ac751e6614eaa50c6e4740ff51392799ed9e
SHA256:
FEF453C53F582E95CA0165194700D53E7075DF2D1D4D0988BA1D53C3FBD9EC97
File Size:
18.94 KB, 18944 bytes
|
|
MD5:
580bbb006bf3082a6d92f8c43d96f941
SHA1:
2232dffc3d195cc77c698af72cfaae8c1fc24f1c
SHA256:
C838A14ABFEDAB39FCE4264709D832A4A2AFAA27A30510E0D9BB8478870CF13A
File Size:
18.94 KB, 18944 bytes
|
|
MD5:
53f8b48aac10f29dbc8017c5b559319a
SHA1:
1f9089055132e3bf6d730a76c3afe3cc2b772221
SHA256:
0BE4B693EEA4B551DE0044D8303C31749DF873E005756DB5A1D68DB8C9A516FD
File Size:
18.43 KB, 18432 bytes
|
|
MD5:
1a1f47e1f32e8cc048d75aaada3e9c4e
SHA1:
f8d65dbb1490501cb7d1888abc6e95738b6804b3
SHA256:
54116D0EE4028AB6C8D5FB2E2BC99C0C563EC68AB03519D07394E21CF11C7275
File Size:
18.43 KB, 18432 bytes
|
|
MD5:
6058d3539ebcea72db9c7e1d86c2b80f
SHA1:
8a2c79fb7b537b85307c2c6d53b91b27a8763dfc
SHA256:
D15A3C2A2BB2A73BC3D92AF0F8342FB12E77EE489E38D76AB37670029BA2F87A
File Size:
18.43 KB, 18432 bytes
|
|
MD5:
a437588684620a52e2f978355a581b3f
SHA1:
9c106028b4e7b237527ddcc7778df2eea5c1b533
SHA256:
0693D1659FF12CECFCC8AC404BEC27C0EB9E2251C15A2049DC5E91268BF72E41
File Size:
18.43 KB, 18432 bytes
|
Windows Portable Executable Attributes
- File doesn't have "Rich" header
- File doesn't have debug information
- File doesn't have exports table
- File doesn't have security information
- File is 32-bit executable
- File is either console or GUI application
- File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
- File is Native application (NOT .NET application)
- File is not packed
- IMAGE_FILE_DLL is not set inside PE header (Executable)
Show More
- IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)
File Traits
- No Version Info
- x86
Block Information
Block Information
During analysis, EnigmaSoft breaks file samples into logical blocks for classification and comparison with other samples. Blocks can be used to generate malware detection rules and to group file samples into families based on shared source code, functionality and other distinguishing attributes and characteristics. This section lists a summary of this block data, as well as its classification by EnigmaSoft. A visual representation of the block data is also displayed, where available.| Total Blocks: | 42 |
|---|---|
| Potentially Malicious Blocks: | 16 |
| Whitelisted Blocks: | 22 |
| Unknown Blocks: | 4 |
Visual Map
? - Unknown Block
x - Potentially Malicious Block