f25577ad00361c4502037f93e0e7111b2337f50aa311b4903df917fb0e36dc3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

xampp-windows-x64-8.0.28-0-VS16-installer.exe
Size

143.3MB
Sample

230614-qt2fwahf8v
MD5

79328bd60910485737bd48ce07c79293
SHA1

76561bf33478cfbf4fff7c586eb7092ac743ed70
SHA256

f25577ad00361c4502037f93e0e7111b2337f50aa311b4903df917fb0e36dc3e
SHA512

cf37e9eaeb84ab53160bceb600ddb0be57dfaf6311200f903be974e7ccedc71e2f474756ba6af8cb43b1a8ae4902dcbdb5b2acc21599afdaa40b1b4389457b67
SSDEEP

3145728:nJoqJsYspxLq2m6ozw4Wi0uEraaJ3YhIt8fuKw0D9QND8up:C1Y0/wzEi0Xr13YhA8WsBQNYc

Score

6^/10

evasion trojan

Malware Config

Targets

- Target
  
  xampp-windows-x64-8.0.28-0-VS16-installer.exe
- Size
  
  143.3MB
- MD5
  
  79328bd60910485737bd48ce07c79293
- SHA1
  
  76561bf33478cfbf4fff7c586eb7092ac743ed70
- SHA256
  
  f25577ad00361c4502037f93e0e7111b2337f50aa311b4903df917fb0e36dc3e
- SHA512
  
  cf37e9eaeb84ab53160bceb600ddb0be57dfaf6311200f903be974e7ccedc71e2f474756ba6af8cb43b1a8ae4902dcbdb5b2acc21599afdaa40b1b4389457b67
- SSDEEP
  
  3145728:nJoqJsYspxLq2m6ozw4Wi0uEraaJ3YhIt8fuKw0D9QND8up:C1Y0/wzEi0Xr13YhA8WsBQNYc
Score

6^/10

evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2