Overview

overview

10

Static

static

21288e10f3...c7.exe

windows7_x64

10

21288e10f3...c7.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21288e10f35fd98053254a8613f4725899a8fe7f4e8f99f6c7c999a8f04353c7

  • Size

    765KB

  • Sample

    220612-lfmy4sbef9

  • MD5

    dce39ede1995a15dca04f2522f9230b5

  • SHA1

    1ac9ce4b452516a9275af6be23707bdaf079adeb

  • SHA256

    21288e10f35fd98053254a8613f4725899a8fe7f4e8f99f6c7c999a8f04353c7

  • SHA512

    2fd0a275447224acd790f5d70051d40b3586e20b8635f9b6fee458f05e4bb9d131471372ade1d3b9fe71b9d620f57f1240f7fdf00660287c5d20bc3bc18d77fa

Score
10/10
salitybackdoorevasiontrojanupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

    • Target

      21288e10f35fd98053254a8613f4725899a8fe7f4e8f99f6c7c999a8f04353c7

    • Size

      765KB

    • MD5

      dce39ede1995a15dca04f2522f9230b5

    • SHA1

      1ac9ce4b452516a9275af6be23707bdaf079adeb

    • SHA256

      21288e10f35fd98053254a8613f4725899a8fe7f4e8f99f6c7c999a8f04353c7

    • SHA512

      2fd0a275447224acd790f5d70051d40b3586e20b8635f9b6fee458f05e4bb9d131471372ade1d3b9fe71b9d620f57f1240f7fdf00660287c5d20bc3bc18d77fa

    Score
    10/10
    salitybackdoorevasiontrojanupx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Modify Registry

5
T1112

Bypass User Account Control

1
T1088

Disabling Security Tools

3
T1089

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks