Analysis
-
max time kernel
142s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
14/06/2023, 13:33
General
-
Target
xampp-windows-x64-8.0.28-0-VS16-installer.exe
-
Size
143.3MB
-
MD5
79328bd60910485737bd48ce07c79293
-
SHA1
76561bf33478cfbf4fff7c586eb7092ac743ed70
-
SHA256
f25577ad00361c4502037f93e0e7111b2337f50aa311b4903df917fb0e36dc3e
-
SHA512
cf37e9eaeb84ab53160bceb600ddb0be57dfaf6311200f903be974e7ccedc71e2f474756ba6af8cb43b1a8ae4902dcbdb5b2acc21599afdaa40b1b4389457b67
-
SSDEEP
3145728:nJoqJsYspxLq2m6ozw4Wi0uEraaJ3YhIt8fuKw0D9QND8up:C1Y0/wzEi0Xr13YhA8WsBQNYc
Malware Config
Signatures
-
Checks whether UAC is enabled 1 TTPs 1 IoCs
-
Loads dropped DLL 15 IoCs
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\xampp-windows-x64-8.0.28-0-VS16-installer.exe"C:\Users\Admin\AppData\Local\Temp\xampp-windows-x64-8.0.28-0-VS16-installer.exe"1⤵
- Checks whether UAC is enabled
- Loads dropped DLL
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
128KB
MD5f2f31d07b6e81f8ae4b80c9c6a60a325
SHA169f7bf5d3ae27a922ab2174bc7e7485b9c66c19c
SHA256385d894797bad7ff9ef8180cbdb100a9a432df2c99563647458d6c32f10ae02f
SHA512a4898a660e874b699dc3dc8d378c75a08603c884b06424f01bea4aeaab427fcc04e14bff3bd95a4296befbde153cc63036aebc01b5de718efe52d48dbb28f1d1
-
Filesize
356KB
MD5c3c4f3fe90e3b3b02bea0e8da3447ed2
SHA17ac0f54119d2273a2cd261f1fe6c5667e9c486df
SHA2563524ec77985e390acf9d07d81b1b44305165d711bbca770f7458ea0a78751f82
SHA5120e24c9394c635a3f1671a297f97b613e6936cd8f862a214125d3456324a18668ae138d5c4fde036f55e2b13b158e4cebc53f78153862a008b1ae747eab228a60
-
Filesize
59KB
MD5f62dd6ce51e19349ec1d1f2e88c4ef4d
SHA160bd29538b4fecaf527ba8b7d92b7f32d2e72ddb
SHA256be88244da9faaa6636a9d2f4c4249c08066a0b48359690b9b27a2b9ed47e093d
SHA512ba68a59427ec252b895e1c3d6879e0c7a010893d23b5a8687ce86d738faaec1367f73abbcf63fb8ce8b95d32afa3049cd59f22f0bc5a2ff2a3b123a54fe02012
-
Filesize
198KB
MD5412c88f7f758f0f1e9e47671474f7a51
SHA12b92ab2b01f58302a04664c3fc1327acf4b86a84
SHA2569857719f6d0dab7eb1c4080c0eb1ae19f15d9e5d547be91f12201071fae1808d
SHA51295cb311323dc40f252612592a3e642beaec50c5c0a76d06ad474ffd195c1d8465149dd882701522906ce99eea6873495ce357cc9aed385b9777f071829138eac
-
Filesize
513KB
MD55fbc6bd806a8a6c460faceeea73bd7f7
SHA14d1586a9631a72c3e1d75fb3c385dbd278804665
SHA2568033d1b3af84d47d275e022608da35baac16cf40d9607ca026a47b6cd65e6a97
SHA5124c51f9f331ac15206942e13504334b4c3549888519388607c44b617a68a9095114b0e6127e82b84170445df06260cc62308bc197b90cfb95af18d7cb6d413195
-
Filesize
235KB
MD551c675fc1ef0a62322052d3e86567c06
SHA1e295d0b668105d81f9180ef1056d0528e4b2116a
SHA256aaa3d7e589e9be1911eee5974afa68c64af1bbd5e039ff6a82a15c2b54c0f9f0
SHA512a352e82db5c930c73165a48337ae51acda7ebd393b8b0b57d03d2e1b5057c41c26b1f321759b7bc521166890853ecdad7b37531212243ad86e181e2252a3b78d
-
Filesize
18KB
MD56d2c718c3059ceaa7b90919e6725a09a
SHA1489967f8fe2b9021a891112754b840fe7dc71d13
SHA2562ca70bc6394ee1b299a8cf1fe28e95c7d68b765e1828db1b651a7a62acae5356
SHA51237547e9c6080d0dcb3ea23d9c856ce689997275b40d72bf9fd7c7c165e8cee4afe2ebe52e052c5f8bfc3e618391425219e9681191ee6f650444ebd643cb5a50d
-
Filesize
19KB
MD5a56543b9cd3aa403311b49189d25851e
SHA1bd2609d35d4a967fe23ef4092b1daa6f74a858ad
SHA256034756f772399552cd33605a189ee0e45d7947860e0d83ec12aa6da1a5a42054
SHA5122237f493d70799675ae0e395f551b6cd46ff4789e46e2453c48fede07b7623b4b8111904d6fa139c204eea4405b5fd5812b0a91f27374219b721339149c25edf
-
Filesize
36KB
MD5a8b2a9bc29f24b733d35a8ef30551edd
SHA13faee2d4e1ce3ddcaa4c560c40e045cf147622cc
SHA25622d4a48d7dd5c51c63e277944a91511e69d514721b5cd60b7da877d38bd8744d
SHA512aca6c103b737e0142913fd12b6783464c7edba1953a0bd07084e996a070a7118d1f571249882f982dc7bd47656ac23b86b598b434176b3ab9553b63512771d78
-
Filesize
96KB
MD59b299884420745d80c70bba6b8a7f05a
SHA1195423185a7776e072a65fbabae868c15f7b2f56
SHA2569426e96a97f41645fab524385a852687792f99b505554b6b9809ed99451b2399
SHA512ed839dc1b6ef53f3663b6055fb2869a522600b2af8d8a800958ddb531154f4e9a3f1733f32dff5511a22fe01525191c8683519cbdcedec138b1bcf3425f2155b
-
Filesize
179KB
MD57a13a1552fa6a5d983df7ca4df4d2b8e
SHA1fb56bf8473730c0c155a41c4326d0086a36fc9c3
SHA2567c7d2ad193cd3b96c402b4da2d138ad8e7fd56a8aaa867871c5122f7674395db
SHA51256ac3d1e5e07b6b9b6e4b1b3c2d38cad4d7616b81855fcaab6856283f866edcdcd3ac43669fc0699d274447b5c8f19fcbd06b7bbd7da68b8787225b708584f3b
-
Filesize
53KB
MD52c8f6a964ca7761122f7da22042462f4
SHA1290e48bf0f83b3f3832f69bb1ea0637ed4d8ccca
SHA2569d6f2629aa5978dd6b87fe9bce77a5cf0135b8da2980a050579eb4e23a92f8fa
SHA51288c49dbc5a5cce28fc61689b953e091dc5114196a9ce5977de1bc1ea916333d73a13d06abb56b7afd88f6c4f80953a2b9b720cd79e773a1246d44b37eae4cbf8
-
Filesize
53KB
MD54640fd47f64bb72cb34dbafee65dbdde
SHA1508c8713e06ba55588d41918c5a99308cb4b37a0
SHA256f02c4352ea80e1b476eb4754455ae684efb4289d95edf925e38bd3789f6ead49
SHA512de2d05ea66ab37b7120cde8f4aeb79c6365430bd94f56b07019451e1329f8f3a2674af9ed6677b8ade59fa2185c6a48eaead47091edc8284e686260c69544a4c
-
Filesize
218KB
MD57190ecf05ec3b297d6ded3e204399e95
SHA15c085cbbbcc8686266acfb318e75a38794625e88
SHA25649e2c502923de5f89958de86f1cc6f91e7ddafe46d0f81bfb51a669627650e6e
SHA5124e12adcaaebdc08e06270437dd4ebf33c4aecd5b6cce7245bf12b0303c809465d75d5b319fb262a807cf9a5cb99d808e466fc30b19d88ddcf2b3f0b9c9f74881
-
Filesize
125KB
MD5053a60f34c75ca0a4a821b46eae86d31
SHA1ebcf9f84a393969655969c248c2d572d7a05541c
SHA256683f19a461948f4cca2fbece26949b34d6347dff279efece983b9f64a868422c
SHA512346c989ef320079b5978678264059ad9e545081dded233d10dca73a72906fa01df30a3c96f6d319efcea64c198ef409748e511dab8a4d43e1fa7af50ed3f0256
-
Filesize
2.9MB
-
Filesize
56KB
-
Filesize
228KB
-
Filesize
80KB
-
Filesize
80KB
-
Filesize
200KB
-
Filesize
108KB
-
Filesize
68KB
-
Filesize
56KB
-
Filesize
100KB
-
Filesize
548KB
-
Filesize
208KB
-
Filesize
84KB
-
Filesize
152KB
-
Filesize
140KB
-
Filesize
2.9MB
-
Filesize
2.9MB
-
Filesize
2.9MB
-
Filesize
2.9MB