General
-
Target
8969309b9e0a0a4dc6a958d51f34637283a80a058dd1ce977a8d1acc9c2428ed
-
Size
332KB
-
Sample
220605-v1vzwscbe6
-
MD5
cf547bf62ab1d3bf361ddf6dcd59c55f
-
SHA1
8737abef83971f23e1a2d2c304e997b39073e4fd
-
SHA256
8969309b9e0a0a4dc6a958d51f34637283a80a058dd1ce977a8d1acc9c2428ed
-
SHA512
239513eb00107785dd7165170832aed7ccdebedd0464d74db800af95a3aa52ef0bc84e4e201221f98dc8a142d25da283dca19fe84376499998e037f320d668d1
Static task
static1
Behavioral task
behavioral1
Sample
8969309b9e0a0a4dc6a958d51f34637283a80a058dd1ce977a8d1acc9c2428ed.exe
Resource
win7-20220414-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
8969309b9e0a0a4dc6a958d51f34637283a80a058dd1ce977a8d1acc9c2428ed
-
Size
332KB
-
MD5
cf547bf62ab1d3bf361ddf6dcd59c55f
-
SHA1
8737abef83971f23e1a2d2c304e997b39073e4fd
-
SHA256
8969309b9e0a0a4dc6a958d51f34637283a80a058dd1ce977a8d1acc9c2428ed
-
SHA512
239513eb00107785dd7165170832aed7ccdebedd0464d74db800af95a3aa52ef0bc84e4e201221f98dc8a142d25da283dca19fe84376499998e037f320d668d1
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-