General
-
Target
bdfafdb3b05bae0c6b7c9c190e591a70
-
Size
364KB
-
Sample
220825-y75dpaaehl
-
MD5
bdfafdb3b05bae0c6b7c9c190e591a70
-
SHA1
5cde118351549571ee86c4edfd76b53bf4649196
-
SHA256
341d6f81dde5483542adb5eb378958e90e40619825b29708f59289a5500c630e
-
SHA512
058cecada7cf173ea6d0cb598fecc82194d76e586ae86f5948ceaa2519a7db41a164f3284bea6f1e14ba5c5ef21d70a5a28df4e5cee07e945d4a894cec61ffd9
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgP0oXrf5kzUI8yzyRqBurgIsU:EagCkDeerRkzUI8yORqErGI5
Static task
static1
Behavioral task
behavioral1
Sample
bdfafdb3b05bae0c6b7c9c190e591a70.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
bdfafdb3b05bae0c6b7c9c190e591a70
-
Size
364KB
-
MD5
bdfafdb3b05bae0c6b7c9c190e591a70
-
SHA1
5cde118351549571ee86c4edfd76b53bf4649196
-
SHA256
341d6f81dde5483542adb5eb378958e90e40619825b29708f59289a5500c630e
-
SHA512
058cecada7cf173ea6d0cb598fecc82194d76e586ae86f5948ceaa2519a7db41a164f3284bea6f1e14ba5c5ef21d70a5a28df4e5cee07e945d4a894cec61ffd9
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgP0oXrf5kzUI8yzyRqBurgIsU:EagCkDeerRkzUI8yORqErGI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-