General
-
Target
a419a4822c5d2068a08960d9d7a11401
-
Size
364KB
-
Sample
220830-x16gqsegdq
-
MD5
a419a4822c5d2068a08960d9d7a11401
-
SHA1
180a06b1db80c65d9e12a9a5662f3cce1cf74c20
-
SHA256
e75ba23462d89911fbabb34cbcec96e307d70bd7823c6646701209fb4a0f380e
-
SHA512
338969e8c63f724e018ac081bf7e9f35de7f9b218c4e7abc08e3fc581ee8ff9b2746270c2510e640b86dcc5b53b5910be45812c7d733e0a371f3c0c7fd31aa1f
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgP3+ziylHgf5kBQGtd/WrybBs:EagCkDt+myJgRkLuWbErSI5
Static task
static1
Behavioral task
behavioral1
Sample
a419a4822c5d2068a08960d9d7a11401.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
a419a4822c5d2068a08960d9d7a11401
-
Size
364KB
-
MD5
a419a4822c5d2068a08960d9d7a11401
-
SHA1
180a06b1db80c65d9e12a9a5662f3cce1cf74c20
-
SHA256
e75ba23462d89911fbabb34cbcec96e307d70bd7823c6646701209fb4a0f380e
-
SHA512
338969e8c63f724e018ac081bf7e9f35de7f9b218c4e7abc08e3fc581ee8ff9b2746270c2510e640b86dcc5b53b5910be45812c7d733e0a371f3c0c7fd31aa1f
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgP3+ziylHgf5kBQGtd/WrybBs:EagCkDt+myJgRkLuWbErSI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-