General
-
Target
cf35476ae190ebafb6a40adfc7674381
-
Size
364KB
-
Sample
220825-y2yzqaadgn
-
MD5
cf35476ae190ebafb6a40adfc7674381
-
SHA1
45ea17803b31578c4e8125b76566e027cf13ba6e
-
SHA256
dbbf0eb4ecc7a39196e9b6783076b067be0e0779561c454d974914e1dcc39fab
-
SHA512
92aae74b8cf75dd14c6959f0d852f99ccf8b7ef854148751af846e47824cf739e084e2002947b2ec1ad05e6c07cfc038a82c488851e717df5af19b6891899d22
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgP3XtZ+Pf5kHpcVxnMjwBurgR:EagCkDMPRkHpc7MjwEr5I5
Static task
static1
Behavioral task
behavioral1
Sample
cf35476ae190ebafb6a40adfc7674381.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
cf35476ae190ebafb6a40adfc7674381
-
Size
364KB
-
MD5
cf35476ae190ebafb6a40adfc7674381
-
SHA1
45ea17803b31578c4e8125b76566e027cf13ba6e
-
SHA256
dbbf0eb4ecc7a39196e9b6783076b067be0e0779561c454d974914e1dcc39fab
-
SHA512
92aae74b8cf75dd14c6959f0d852f99ccf8b7ef854148751af846e47824cf739e084e2002947b2ec1ad05e6c07cfc038a82c488851e717df5af19b6891899d22
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgP3XtZ+Pf5kHpcVxnMjwBurgR:EagCkDMPRkHpc7MjwEr5I5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-