General
-
Target
11375d1347b5112cec46dc7f281d88785d0043635bd3a6eaf182eec5f5563f9b
-
Size
168KB
-
Sample
220604-jr5xysebb8
-
MD5
4963de4a5a0f18e646a26453b0125ed9
-
SHA1
b075582dadff9ffd64ec19f94bb2e861e62b3221
-
SHA256
11375d1347b5112cec46dc7f281d88785d0043635bd3a6eaf182eec5f5563f9b
-
SHA512
30861ad7a545fa223819e38f32a6652113b4aa08a652901dcd727e60e744592d9abbe2fb0f892f30a771e75187a373016c5b44a5e649d97c6b5cbb51643948e9
Static task
static1
Behavioral task
behavioral1
Sample
11375d1347b5112cec46dc7f281d88785d0043635bd3a6eaf182eec5f5563f9b.exe
Resource
win7-20220414-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
11375d1347b5112cec46dc7f281d88785d0043635bd3a6eaf182eec5f5563f9b
-
Size
168KB
-
MD5
4963de4a5a0f18e646a26453b0125ed9
-
SHA1
b075582dadff9ffd64ec19f94bb2e861e62b3221
-
SHA256
11375d1347b5112cec46dc7f281d88785d0043635bd3a6eaf182eec5f5563f9b
-
SHA512
30861ad7a545fa223819e38f32a6652113b4aa08a652901dcd727e60e744592d9abbe2fb0f892f30a771e75187a373016c5b44a5e649d97c6b5cbb51643948e9
-
Modifies firewall policy service
-
Loads dropped DLL
-