General
-
Target
30fc94fb1f9ab5273746539d316d3399
-
Size
356KB
-
Sample
220830-x1x6csegdm
-
MD5
30fc94fb1f9ab5273746539d316d3399
-
SHA1
031d36dcf4f7fa777cbeda2e13a538c97c075e11
-
SHA256
a40394e67969d92cf910879064a5d01b9da9015425462db4f057428680dc3e86
-
SHA512
3ec6cb6bbd336aaad943e4c005b0783d1784e7a8ab660a12a1c4cbb17b9bcfc5c60afb94324c401f4d7b0deb8fd00294a261a8d8e303a1347cac0e7374958325
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPS/AOrf5k0pm+6GX3BurgI3U:EagCkDWAOrRk0IS3ErZI5
Static task
static1
Behavioral task
behavioral1
Sample
30fc94fb1f9ab5273746539d316d3399.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
30fc94fb1f9ab5273746539d316d3399
-
Size
356KB
-
MD5
30fc94fb1f9ab5273746539d316d3399
-
SHA1
031d36dcf4f7fa777cbeda2e13a538c97c075e11
-
SHA256
a40394e67969d92cf910879064a5d01b9da9015425462db4f057428680dc3e86
-
SHA512
3ec6cb6bbd336aaad943e4c005b0783d1784e7a8ab660a12a1c4cbb17b9bcfc5c60afb94324c401f4d7b0deb8fd00294a261a8d8e303a1347cac0e7374958325
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPS/AOrf5k0pm+6GX3BurgI3U:EagCkDWAOrRk0IS3ErZI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-