General
-
Target
110f996c07a9fc59cef46cd4b038ba01898fd466f2b0051cee6549318baab909
-
Size
2.1MB
-
Sample
220604-lyzevsaed3
-
MD5
1e95325c8651622427f8d75903529317
-
SHA1
901607802d7ddac36946a24c8b8d40d838b4b253
-
SHA256
110f996c07a9fc59cef46cd4b038ba01898fd466f2b0051cee6549318baab909
-
SHA512
64b01f7e19437d240da15c4dbb042c0871e6317b332fba5cfd35e3c91bff18b9588f4aa6cd83250c839ed5cbdfa26323503cec875a2b746b72f16528ee6abd33
Static task
static1
Behavioral task
behavioral1
Sample
110f996c07a9fc59cef46cd4b038ba01898fd466f2b0051cee6549318baab909.exe
Resource
win7-20220414-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
110f996c07a9fc59cef46cd4b038ba01898fd466f2b0051cee6549318baab909
-
Size
2.1MB
-
MD5
1e95325c8651622427f8d75903529317
-
SHA1
901607802d7ddac36946a24c8b8d40d838b4b253
-
SHA256
110f996c07a9fc59cef46cd4b038ba01898fd466f2b0051cee6549318baab909
-
SHA512
64b01f7e19437d240da15c4dbb042c0871e6317b332fba5cfd35e3c91bff18b9588f4aa6cd83250c839ed5cbdfa26323503cec875a2b746b72f16528ee6abd33
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops file in System32 directory
-