General
-
Target
533be406ce5edf8ba5a2f02835fa6a96192f426d27a2e571dc69e35f0352cb6c
-
Size
1.1MB
-
Sample
220717-avkxhshfel
-
MD5
d6a7b0a231c4e4bd8d1638abf43292e0
-
SHA1
8a6fd2338ae5e0b28c3de639682e4bfa9f8bab1a
-
SHA256
533be406ce5edf8ba5a2f02835fa6a96192f426d27a2e571dc69e35f0352cb6c
-
SHA512
1da3528b239c22ea7605e430505686773a7c2cd449b5833fc90657da62ee51b144a0262238c582ada3fda2d1d1f92a70a6391d2c24b904b0decff3cd5a0781be
Static task
static1
Behavioral task
behavioral1
Sample
533be406ce5edf8ba5a2f02835fa6a96192f426d27a2e571dc69e35f0352cb6c.exe
Resource
win7-20220414-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
http://klkjwre77638dfqwieuoi888.info/
Targets
-
-
Target
533be406ce5edf8ba5a2f02835fa6a96192f426d27a2e571dc69e35f0352cb6c
-
Size
1.1MB
-
MD5
d6a7b0a231c4e4bd8d1638abf43292e0
-
SHA1
8a6fd2338ae5e0b28c3de639682e4bfa9f8bab1a
-
SHA256
533be406ce5edf8ba5a2f02835fa6a96192f426d27a2e571dc69e35f0352cb6c
-
SHA512
1da3528b239c22ea7605e430505686773a7c2cd449b5833fc90657da62ee51b144a0262238c582ada3fda2d1d1f92a70a6391d2c24b904b0decff3cd5a0781be
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-