General
-
Target
e4aff308bfc1759e22bd0b9b90f058fd
-
Size
364KB
-
Sample
220825-y813nabdh3
-
MD5
e4aff308bfc1759e22bd0b9b90f058fd
-
SHA1
25c4b6b7bde128de2d34069736d8209485470cb0
-
SHA256
361d661eddf275abdfe5f48f204cc6317156ca4575a36b1904a915c743dc97c8
-
SHA512
a92161e3a97783bc595898d121fd9962d485fbf76176a41310024cb15e9a95f910597e80621e21005d001a5b3dff36538fa18d123327669e828fd9c36f8e37e6
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPMOXY+Dfkf5kV5WxHbCNCBuf:EagCkDLXNcRk7WF1Er5cI5
Static task
static1
Behavioral task
behavioral1
Sample
e4aff308bfc1759e22bd0b9b90f058fd.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
e4aff308bfc1759e22bd0b9b90f058fd
-
Size
364KB
-
MD5
e4aff308bfc1759e22bd0b9b90f058fd
-
SHA1
25c4b6b7bde128de2d34069736d8209485470cb0
-
SHA256
361d661eddf275abdfe5f48f204cc6317156ca4575a36b1904a915c743dc97c8
-
SHA512
a92161e3a97783bc595898d121fd9962d485fbf76176a41310024cb15e9a95f910597e80621e21005d001a5b3dff36538fa18d123327669e828fd9c36f8e37e6
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPMOXY+Dfkf5kV5WxHbCNCBuf:EagCkDLXNcRk7WF1Er5cI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-