General
-
Target
ea61093d2cd65231daff307e424b0d33
-
Size
364KB
-
Sample
220830-x1vp8sgch9
-
MD5
ea61093d2cd65231daff307e424b0d33
-
SHA1
8b84a6b998daef9b8118639118903b32be699edf
-
SHA256
4a2ebacf7f757a655909dc002158bcca405aa0f07d34c54b81d10b5a90c5b9b1
-
SHA512
c2b54abec62607e76341075005a2a5b3f7006e6d67f800fbf9cc47f3eaef1db8574c9a86acb03cc08d78765809a401bde8cd8c8a2115c63b8570818267906489
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgP70gof5kfj7+Gu1a1BurgIHU:EagCkD+lRk/usErNI5
Static task
static1
Behavioral task
behavioral1
Sample
ea61093d2cd65231daff307e424b0d33.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
ea61093d2cd65231daff307e424b0d33
-
Size
364KB
-
MD5
ea61093d2cd65231daff307e424b0d33
-
SHA1
8b84a6b998daef9b8118639118903b32be699edf
-
SHA256
4a2ebacf7f757a655909dc002158bcca405aa0f07d34c54b81d10b5a90c5b9b1
-
SHA512
c2b54abec62607e76341075005a2a5b3f7006e6d67f800fbf9cc47f3eaef1db8574c9a86acb03cc08d78765809a401bde8cd8c8a2115c63b8570818267906489
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgP70gof5kfj7+Gu1a1BurgIHU:EagCkD+lRk/usErNI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-