Rule was created by Felix Bilstein – yara-signator at cocacoding dot com. Malpedia is used as data source, but only single samples are documented. The code and documentation is published here: https://://://github.com/fxb-cocacoding/yara-Signator. The strings used in this rule have been automatically selected from the disassembly of memory dumps and unpacked files, using YARA-Signators. The rules are automatically generated using Yara’s tool tool.”]
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.phorpiex