General
-
Target
9ef7a787326c0caca68f50bea9553e34
-
Size
364KB
-
Sample
220825-y2wjlaadgm
-
MD5
9ef7a787326c0caca68f50bea9553e34
-
SHA1
e2de18c4975b2e1b91c5ff45fbd49d6e6290869a
-
SHA256
d5c4f8404badece160d9830034bcdcce3f9f881d1ecd2781203ea181cb8708a1
-
SHA512
8e6baf44932ccdc977023ac10baca03538580a1ec5782ec25df56ea261ac26161a2a93e0518e1160201f3ae84fd3aa1e19e82f7c84a0f7f3ab89053c2bcf9dc5
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPHXspSCZf5k6+OzfO9BurgIO:EagCkDVspDRkfOzGErnI5
Static task
static1
Behavioral task
behavioral1
Sample
9ef7a787326c0caca68f50bea9553e34.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
9ef7a787326c0caca68f50bea9553e34
-
Size
364KB
-
MD5
9ef7a787326c0caca68f50bea9553e34
-
SHA1
e2de18c4975b2e1b91c5ff45fbd49d6e6290869a
-
SHA256
d5c4f8404badece160d9830034bcdcce3f9f881d1ecd2781203ea181cb8708a1
-
SHA512
8e6baf44932ccdc977023ac10baca03538580a1ec5782ec25df56ea261ac26161a2a93e0518e1160201f3ae84fd3aa1e19e82f7c84a0f7f3ab89053c2bcf9dc5
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPHXspSCZf5k6+OzfO9BurgIO:EagCkDVspDRkfOzGErnI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-