General
-
Target
01d9855a2ba043a0d3b64459bed5905a
-
Size
368KB
-
Sample
220825-yezbzaaadj
-
MD5
01d9855a2ba043a0d3b64459bed5905a
-
SHA1
eb4f40e1aee887ea8cfd839065702066fbbd1673
-
SHA256
57031c6d4cf98c5cac99eb25749c6bc557bb5a0854bcad9ee925baf22b457015
-
SHA512
29058399d97f54db28c27d719c379050a23adde9f12e3ba9d673e91c1e14dfda6d895f494f5a7f244351cfb82d33a786f275c04aa4e45be61dbcd8c777ed9d5e
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPMokB+fZgbf5k0ku5BurgI+U:EagCkDhTQRk0ku5Er4I5
Static task
static1
Behavioral task
behavioral1
Sample
01d9855a2ba043a0d3b64459bed5905a.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
01d9855a2ba043a0d3b64459bed5905a
-
Size
368KB
-
MD5
01d9855a2ba043a0d3b64459bed5905a
-
SHA1
eb4f40e1aee887ea8cfd839065702066fbbd1673
-
SHA256
57031c6d4cf98c5cac99eb25749c6bc557bb5a0854bcad9ee925baf22b457015
-
SHA512
29058399d97f54db28c27d719c379050a23adde9f12e3ba9d673e91c1e14dfda6d895f494f5a7f244351cfb82d33a786f275c04aa4e45be61dbcd8c777ed9d5e
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPMokB+fZgbf5k0ku5BurgI+U:EagCkDhTQRk0ku5Er4I5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-