General
-
Target
4771a9b9240d732a11a4f25240ceef633a49ecb81ed6503b427688d16f740664
-
Size
221KB
-
Sample
220714-hfm3bsafal
-
MD5
90af628b9c7875599eb32e093310c8b1
-
SHA1
56163f9470a0880b516a9347335bb61864301274
-
SHA256
4771a9b9240d732a11a4f25240ceef633a49ecb81ed6503b427688d16f740664
-
SHA512
30292178bb237ceee8faf3b06250e28b95ee24d91bcf0f5d0509f38a04a87ac7bd609437fb41ca62ed1dadef1a08b0a029b8b3b85d7009239b622db7ffcb47b9
Static task
static1
Behavioral task
behavioral1
Sample
4771a9b9240d732a11a4f25240ceef633a49ecb81ed6503b427688d16f740664.exe
Resource
win7-20220414-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
http://klkjwre77638dfqwieuoi888.info/
Targets
-
-
Target
4771a9b9240d732a11a4f25240ceef633a49ecb81ed6503b427688d16f740664
-
Size
221KB
-
MD5
90af628b9c7875599eb32e093310c8b1
-
SHA1
56163f9470a0880b516a9347335bb61864301274
-
SHA256
4771a9b9240d732a11a4f25240ceef633a49ecb81ed6503b427688d16f740664
-
SHA512
30292178bb237ceee8faf3b06250e28b95ee24d91bcf0f5d0509f38a04a87ac7bd609437fb41ca62ed1dadef1a08b0a029b8b3b85d7009239b622db7ffcb47b9
-
Modifies firewall policy service
-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-