General
-
Target
33a8ee63ed0fe0b39714cdf05ed65f99
-
Size
368KB
-
Sample
220825-yd7xqaagf7
-
MD5
33a8ee63ed0fe0b39714cdf05ed65f99
-
SHA1
17901b582d6864e6adb7427a0e38519f0a46aa6f
-
SHA256
6d18da75c539d6029eee08116d2e39c0987565662311b5b5e10c43093bb99cac
-
SHA512
1ae6de4faf5b54855861dd58d5df9f383d6cf332306dde791c67c449ef4305536830c5e3b4e32526711d4a66b99c7ca063e66f250ae043a8ac9b467ab410c2fd
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPfXLgljf5kHRh3BurgIf7wrF:EagCkDdXajRkxh3ErhI5
Static task
static1
Behavioral task
behavioral1
Sample
33a8ee63ed0fe0b39714cdf05ed65f99.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
33a8ee63ed0fe0b39714cdf05ed65f99
-
Size
368KB
-
MD5
33a8ee63ed0fe0b39714cdf05ed65f99
-
SHA1
17901b582d6864e6adb7427a0e38519f0a46aa6f
-
SHA256
6d18da75c539d6029eee08116d2e39c0987565662311b5b5e10c43093bb99cac
-
SHA512
1ae6de4faf5b54855861dd58d5df9f383d6cf332306dde791c67c449ef4305536830c5e3b4e32526711d4a66b99c7ca063e66f250ae043a8ac9b467ab410c2fd
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPfXLgljf5kHRh3BurgIf7wrF:EagCkDdXajRkxh3ErhI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-