General
-
Target
1c1ccdc58e922bf5c8784cdb85100c1510ab406b3b170190cb202a7a0d0f05f9
-
Size
1.1MB
-
Sample
220607-t24gzsccf5
-
MD5
a2f29e5b9b1dccc27fc086a4cdfaecc0
-
SHA1
39dfffeabf8b89215e6fe5ccf597aa9dec67ee01
-
SHA256
1c1ccdc58e922bf5c8784cdb85100c1510ab406b3b170190cb202a7a0d0f05f9
-
SHA512
864a35064eaf298c3391133473741bdaa2706b5a4721e1121b98a85edf365f2a81303b597a6c62154fd27d3476adbd0603e60f551f62f9810a6b7df55f280994
Static task
static1
Behavioral task
behavioral1
Sample
1c1ccdc58e922bf5c8784cdb85100c1510ab406b3b170190cb202a7a0d0f05f9.exe
Resource
win7-20220414-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
http://klkjwre77638dfqwieuoi888.info/
Targets
-
-
Target
1c1ccdc58e922bf5c8784cdb85100c1510ab406b3b170190cb202a7a0d0f05f9
-
Size
1.1MB
-
MD5
a2f29e5b9b1dccc27fc086a4cdfaecc0
-
SHA1
39dfffeabf8b89215e6fe5ccf597aa9dec67ee01
-
SHA256
1c1ccdc58e922bf5c8784cdb85100c1510ab406b3b170190cb202a7a0d0f05f9
-
SHA512
864a35064eaf298c3391133473741bdaa2706b5a4721e1121b98a85edf365f2a81303b597a6c62154fd27d3476adbd0603e60f551f62f9810a6b7df55f280994
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-