Overview

overview

8

Static

static

EasyPHP-De...up.exe

windows10-2004-x64

8

Resubmissions

08/01/2023, 06:12

230108-gx6ekach58 8

08/01/2023, 06:05

230108-gtdkdagc3x 8

Sharing

Copy URL Twitter E-mail

General

  • Target

    EasyPHP-Devserver-17.0-setup.exe

  • Size

    60.9MB

  • Sample

    230108-gx6ekach58

  • MD5

    c95b6c56b1a4a203790915af8380804c

  • SHA1

    9cfda4827a7209fdaec48bd384fe9dad4964fd08

  • SHA256

    fc0c2c5bd9b55fadedc7aab674d2a5d3c32b6bb90f8e2a88f93fbbd4deb52930

  • SHA512

    cb6d8fc566db2bbc5139b31a9c2aa214c4db53b2cf3d0ad4f5337f378fb373fce02489e089f9435f81e53c591ee737e9b6f21ddf761e1a5cf5d8e90b6e40b00b

  • SSDEEP

    1572864:qVCI3cJ78kolRcNPAVgc+WYOCSbeyna3QLiD5IJvB:SCCcJ78zlRctu5zYOaEa3QSIJ5

Score
8/10

Malware Config

Targets

    • Target

      EasyPHP-Devserver-17.0-setup.exe

    • Size

      60.9MB

    • MD5

      c95b6c56b1a4a203790915af8380804c

    • SHA1

      9cfda4827a7209fdaec48bd384fe9dad4964fd08

    • SHA256

      fc0c2c5bd9b55fadedc7aab674d2a5d3c32b6bb90f8e2a88f93fbbd4deb52930

    • SHA512

      cb6d8fc566db2bbc5139b31a9c2aa214c4db53b2cf3d0ad4f5337f378fb373fce02489e089f9435f81e53c591ee737e9b6f21ddf761e1a5cf5d8e90b6e40b00b

    • SSDEEP

      1572864:qVCI3cJ78kolRcNPAVgc+WYOCSbeyna3QLiD5IJvB:SCCcJ78zlRctu5zYOaEa3QSIJ5

    Score
    8/10

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks