General
-
Target
117e11cfaea8cfbc94fcf1dbd868231008e92f363f91b234a7f07809b5006cc4
-
Size
100KB
-
Sample
220604-d5ep2aged7
-
MD5
f7e25cb0acf250e3cdb4cfb8644ce4f5
-
SHA1
631a0d8ce5faf2fb86f0de85f1aedb5e21e63b1f
-
SHA256
117e11cfaea8cfbc94fcf1dbd868231008e92f363f91b234a7f07809b5006cc4
-
SHA512
692b6a05343645aff4480e24f33353a6940f624b12746587eb277ca0278a8593fcdcb4d9121cae6a4c7d292aab36b2e7b3f07353a5057f88d986ff773d04066a
Static task
static1
Behavioral task
behavioral1
Sample
117e11cfaea8cfbc94fcf1dbd868231008e92f363f91b234a7f07809b5006cc4.exe
Resource
win7-20220414-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
117e11cfaea8cfbc94fcf1dbd868231008e92f363f91b234a7f07809b5006cc4
-
Size
100KB
-
MD5
f7e25cb0acf250e3cdb4cfb8644ce4f5
-
SHA1
631a0d8ce5faf2fb86f0de85f1aedb5e21e63b1f
-
SHA256
117e11cfaea8cfbc94fcf1dbd868231008e92f363f91b234a7f07809b5006cc4
-
SHA512
692b6a05343645aff4480e24f33353a6940f624b12746587eb277ca0278a8593fcdcb4d9121cae6a4c7d292aab36b2e7b3f07353a5057f88d986ff773d04066a
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-