General
-
Target
3a127472d8c46c61ab688ef476639e3a
-
Size
356KB
-
Sample
220825-y2ntraadgl
-
MD5
3a127472d8c46c61ab688ef476639e3a
-
SHA1
781f697671f7a3cf13d8cec6aaf621589323c777
-
SHA256
7258f837b9588fe9a297f48ab9d79e3f02da0196b1adfc9fb02e894744199c3f
-
SHA512
9ea661beac4b68b44eb6c686fdec0c7ab39c6ccde436be4e38bd02b5337860baf4dc49f2421f8dc95912d7e8896121a23f777e93cf7a5881ad7f8f41a5fd2b25
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPOLuNh1k0G6zZf5kdBurgI9U:EagCkDIyNTC6tRkdErrI5
Static task
static1
Behavioral task
behavioral1
Sample
3a127472d8c46c61ab688ef476639e3a.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
3a127472d8c46c61ab688ef476639e3a
-
Size
356KB
-
MD5
3a127472d8c46c61ab688ef476639e3a
-
SHA1
781f697671f7a3cf13d8cec6aaf621589323c777
-
SHA256
7258f837b9588fe9a297f48ab9d79e3f02da0196b1adfc9fb02e894744199c3f
-
SHA512
9ea661beac4b68b44eb6c686fdec0c7ab39c6ccde436be4e38bd02b5337860baf4dc49f2421f8dc95912d7e8896121a23f777e93cf7a5881ad7f8f41a5fd2b25
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPOLuNh1k0G6zZf5kdBurgI9U:EagCkDIyNTC6tRkdErrI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-