Overview

overview

10

Static

static

5b62c0da29...43.exe

windows7_x64

10

5b62c0da29...43.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b62c0da29ad39bfba8a439a08b6c17f7d6edd596d31becd565f17d3b420de43

  • Size

    916KB

  • Sample

    220709-j22y2sdahp

  • MD5

    a1919df2cfec59ab1da236b552fe82b5

  • SHA1

    0f10bcd468f7ef1294e6a3781f7b1da4d815d9ab

  • SHA256

    5b62c0da29ad39bfba8a439a08b6c17f7d6edd596d31becd565f17d3b420de43

  • SHA512

    e0a34ba43653b0ccafd93edb67d6f49306603e0427d369aeba7772ff603c9834824823104ecd23693a60c6b80d122f9922d75d3dc34525b9651162dc60ca2f06

Score
10/10
salitybackdoorevasiontrojanupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

    • Target

      5b62c0da29ad39bfba8a439a08b6c17f7d6edd596d31becd565f17d3b420de43

    • Size

      916KB

    • MD5

      a1919df2cfec59ab1da236b552fe82b5

    • SHA1

      0f10bcd468f7ef1294e6a3781f7b1da4d815d9ab

    • SHA256

      5b62c0da29ad39bfba8a439a08b6c17f7d6edd596d31becd565f17d3b420de43

    • SHA512

      e0a34ba43653b0ccafd93edb67d6f49306603e0427d369aeba7772ff603c9834824823104ecd23693a60c6b80d122f9922d75d3dc34525b9651162dc60ca2f06

    Score
    10/10
    salitybackdoorevasiontrojanupx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Modify Registry

5
T1112

Bypass User Account Control

1
T1088

Disabling Security Tools

3
T1089

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks