General
-
Target
1128-61-0x0000000000680000-0x000000000173A000-memory.dmp
-
Size
16.7MB
-
MD5
1801b8c4b5265812c1bf5550cf542100
-
SHA1
48a9fc20d2c9c248e50c74e08937877d7f285fc1
-
SHA256
3680f1622fa02b2efb460395d59f3f69b79e6e87154d62008ab66ae4cbfdd4f6
-
SHA512
111736c3560915dfc76dcabf012231de7462cb9d0b4d244b5f701161a8d1dd7ec98f84c5b5068cd74df231660f161b5dfdd6504fafe692f1569ced5986c1442a
-
SSDEEP
3072:ISBhs0MG+fXpDJQ/MrFaXyuQV960S9coX+Tp2p:tBhsXxpDJiIFaXyuY960doX+Tpa
Score
10/10
Malware Config
Extracted
Family
sality
C2
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Signatures
-
Sality family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Files
-
1128-61-0x0000000000680000-0x000000000173A000-memory.dmp
Headers
Sections