General
-
Target
cf5022347156b611901e720d0751966382533cf8d78be2031bc95d36de1b0128
-
Size
1.1MB
-
Sample
220724-qxnzysebck
-
MD5
8e87048678cfa281b892e0fc6d51a63b
-
SHA1
422a69ae391cc15c7135dc349f5190da3f53f3f7
-
SHA256
cf5022347156b611901e720d0751966382533cf8d78be2031bc95d36de1b0128
-
SHA512
e36ea0cfce983fc311d81ac01271977fcba687a2980cee7ed8812d5189af31290223ca5037217a670d8d6839d6e895b5ef4074db90cd7c0f9dd25f20c0a903f3
Static task
static1
Behavioral task
behavioral1
Sample
cf5022347156b611901e720d0751966382533cf8d78be2031bc95d36de1b0128.exe
Resource
win7-20220718-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
cf5022347156b611901e720d0751966382533cf8d78be2031bc95d36de1b0128
-
Size
1.1MB
-
MD5
8e87048678cfa281b892e0fc6d51a63b
-
SHA1
422a69ae391cc15c7135dc349f5190da3f53f3f7
-
SHA256
cf5022347156b611901e720d0751966382533cf8d78be2031bc95d36de1b0128
-
SHA512
e36ea0cfce983fc311d81ac01271977fcba687a2980cee7ed8812d5189af31290223ca5037217a670d8d6839d6e895b5ef4074db90cd7c0f9dd25f20c0a903f3
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-