General
-
Target
33c4503e147d203ebe76e4bf27c1248f167bc02ee42547bc916e905ab7eb81bf
-
Size
357KB
-
Sample
220620-alv15aghdl
-
MD5
5945e344a0cfa8ec080fde895923744f
-
SHA1
0079a2affd973e6e80172ff07afc0c8727765143
-
SHA256
33c4503e147d203ebe76e4bf27c1248f167bc02ee42547bc916e905ab7eb81bf
-
SHA512
b608ec4713859df4937bcd50a163e2b5e7087a543281989a1f67d1046f5c1858a5564ca45397e7aefb241502d17d2173570771fe227fc083241aedb1119eea1b
Static task
static1
Behavioral task
behavioral1
Sample
33c4503e147d203ebe76e4bf27c1248f167bc02ee42547bc916e905ab7eb81bf.exe
Resource
win7-20220414-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
33c4503e147d203ebe76e4bf27c1248f167bc02ee42547bc916e905ab7eb81bf
-
Size
357KB
-
MD5
5945e344a0cfa8ec080fde895923744f
-
SHA1
0079a2affd973e6e80172ff07afc0c8727765143
-
SHA256
33c4503e147d203ebe76e4bf27c1248f167bc02ee42547bc916e905ab7eb81bf
-
SHA512
b608ec4713859df4937bcd50a163e2b5e7087a543281989a1f67d1046f5c1858a5564ca45397e7aefb241502d17d2173570771fe227fc083241aedb1119eea1b
-
Modifies firewall policy service
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-