General
-
Target
df4a4e0d9c3a1a259ab41fad6bf45788
-
Size
364KB
-
Sample
220830-x1bmcsgcg5
-
MD5
df4a4e0d9c3a1a259ab41fad6bf45788
-
SHA1
972ab064c1f8ece604932f9dfb24523ac1f50a68
-
SHA256
b1a5ba0a25000f9ef9796aea25a23f7697501cad3b03db7ad5cf701964d9af4a
-
SHA512
88793bf3a0c034411c18000a4764e5bbc28e3a69da024cb08ce508e223ce76db274603cd1a56f6e0a17429b74d2233e860ac94caec17d077ae09c1c3423b2004
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPbVShf5kkmERgDBurgIH7wrF:EagCkDpVShRkuyDErFI5
Static task
static1
Behavioral task
behavioral1
Sample
df4a4e0d9c3a1a259ab41fad6bf45788.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
df4a4e0d9c3a1a259ab41fad6bf45788
-
Size
364KB
-
MD5
df4a4e0d9c3a1a259ab41fad6bf45788
-
SHA1
972ab064c1f8ece604932f9dfb24523ac1f50a68
-
SHA256
b1a5ba0a25000f9ef9796aea25a23f7697501cad3b03db7ad5cf701964d9af4a
-
SHA512
88793bf3a0c034411c18000a4764e5bbc28e3a69da024cb08ce508e223ce76db274603cd1a56f6e0a17429b74d2233e860ac94caec17d077ae09c1c3423b2004
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPbVShf5kkmERgDBurgIH7wrF:EagCkDpVShRkuyDErFI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-