General
-
Target
5f28f4645b9bd5c178fb03e56e2b88714159eae1c4f5317b7ba83fa86ea271b2
-
Size
1012KB
-
Sample
220731-wnpg1sbffp
-
MD5
af89adec79d81cb6c3d22e092fa4ea30
-
SHA1
e95b4307a23960e1c2631c87af03c89977ef68cd
-
SHA256
5f28f4645b9bd5c178fb03e56e2b88714159eae1c4f5317b7ba83fa86ea271b2
-
SHA512
a34db4e66e31a948222e6822264c7ec211b8c08e066cb083ef4d293ba1ef5ae37d07c19a33cebcd2c75b5c644eea113d43d41cad9675ecd4baa6802230f13281
Static task
static1
Behavioral task
behavioral1
Sample
5f28f4645b9bd5c178fb03e56e2b88714159eae1c4f5317b7ba83fa86ea271b2.exe
Resource
win7-20220718-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
5f28f4645b9bd5c178fb03e56e2b88714159eae1c4f5317b7ba83fa86ea271b2
-
Size
1012KB
-
MD5
af89adec79d81cb6c3d22e092fa4ea30
-
SHA1
e95b4307a23960e1c2631c87af03c89977ef68cd
-
SHA256
5f28f4645b9bd5c178fb03e56e2b88714159eae1c4f5317b7ba83fa86ea271b2
-
SHA512
a34db4e66e31a948222e6822264c7ec211b8c08e066cb083ef4d293ba1ef5ae37d07c19a33cebcd2c75b5c644eea113d43d41cad9675ecd4baa6802230f13281
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-