General
-
Target
4f9ef492d83c74652bf2195614cecbbd32bfc552ec08d912e63f97b383abe2c3
-
Size
1012KB
-
Sample
220719-1tlqjaeff4
-
MD5
adecd5f698025ea260b8946084909fc0
-
SHA1
a6e8b997e77326d051fce4e0a3b9177f1028aaa8
-
SHA256
4f9ef492d83c74652bf2195614cecbbd32bfc552ec08d912e63f97b383abe2c3
-
SHA512
6648b4442dfd6149bd4145e0390f60bc8afacd2c400ecec80c840c7d2a423e5b11fd81052fd05fae854e4ab93df9098f70ec4460354420c3849919e1707a9ec3
Static task
static1
Behavioral task
behavioral1
Sample
4f9ef492d83c74652bf2195614cecbbd32bfc552ec08d912e63f97b383abe2c3.exe
Resource
win7-20220718-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
4f9ef492d83c74652bf2195614cecbbd32bfc552ec08d912e63f97b383abe2c3
-
Size
1012KB
-
MD5
adecd5f698025ea260b8946084909fc0
-
SHA1
a6e8b997e77326d051fce4e0a3b9177f1028aaa8
-
SHA256
4f9ef492d83c74652bf2195614cecbbd32bfc552ec08d912e63f97b383abe2c3
-
SHA512
6648b4442dfd6149bd4145e0390f60bc8afacd2c400ecec80c840c7d2a423e5b11fd81052fd05fae854e4ab93df9098f70ec4460354420c3849919e1707a9ec3
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-