General
-
Target
7ec5c2845b657f6d18800a4a76b60b79408c210370b010db024154468115ff14
-
Size
205KB
-
Sample
220605-r83g6affem
-
MD5
7b5db1a7e9cd2ac832ee0406a9f6863b
-
SHA1
0a93b42b352f075b605ffa1958329b70d360de6d
-
SHA256
7ec5c2845b657f6d18800a4a76b60b79408c210370b010db024154468115ff14
-
SHA512
72c49a4c00760614fb0bbdb780d96771e1eb945b58d955dd686c9c5e41a7755bb2c62de68128b872ee5c18c26a38626cc52081767515e457c208f48f62ff05b1
Static task
static1
Behavioral task
behavioral1
Sample
7ec5c2845b657f6d18800a4a76b60b79408c210370b010db024154468115ff14.exe
Resource
win7-20220414-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
7ec5c2845b657f6d18800a4a76b60b79408c210370b010db024154468115ff14
-
Size
205KB
-
MD5
7b5db1a7e9cd2ac832ee0406a9f6863b
-
SHA1
0a93b42b352f075b605ffa1958329b70d360de6d
-
SHA256
7ec5c2845b657f6d18800a4a76b60b79408c210370b010db024154468115ff14
-
SHA512
72c49a4c00760614fb0bbdb780d96771e1eb945b58d955dd686c9c5e41a7755bb2c62de68128b872ee5c18c26a38626cc52081767515e457c208f48f62ff05b1
-
Modifies firewall policy service
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-