Files named xampp_install.exe

177.170.106.55 · xampp_install.exe

/usuario/@data/asrock a68m-itx/AllIn1(v15.20.1065)/AllIn1(v15.20.1065)/Packages/apps/RAIDXpert2_bolton/x64/

Brazil · TELEFONICA BRASIL S.A

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 088a76078e39c4c87bad678cda9ce502b93796c5
SHA256: 7fdf11b1964ac7a5ff47b3eeed6e9e6f4a94a638eed8db55ba7c8e9a99a90f15
application/x-msdos-program
71.72MB
2012-11-16 04:35:00 +0000 UTC
177.170.106.55 · xampp_install.exe

/usuario/@data/asrock a68m-itx/AllIn1(v15.20.1065)/AllIn1(v15.20.1065)/Packages/Packages/Apps/RAIDXpert2_bolton/x86/

Brazil · TELEFONICA BRASIL S.A

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 6cc2361fa951aa99fbc35079e5c667b45ebcee80
SHA256: 3393d196937e63b6ed1ea08f673c6365b027479d8de8bff898c16b7375ff33ed
application/x-msdos-program
72.28MB
2015-06-16 13:21:58 +0000 UTC
177.170.106.55 · xampp_install.exe

/usuario/@data/asrock a68m-itx/AllIn1(v15.20.1065)/AllIn1(v15.20.1065)/Packages/Packages/Apps/RAIDXpert2_bolton/x64/

Brazil · TELEFONICA BRASIL S.A

Yara INDICATOR_EXE_Packed_UPolyX From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 6cc2361fa951aa99fbc35079e5c667b45ebcee80
SHA256: 3393d196937e63b6ed1ea08f673c6365b027479d8de8bff898c16b7375ff33ed
application/x-msdos-program
72.28MB
2015-06-16 13:21:58 +0000 UTC