General
-
Target
fe150e03e7787a979bc940cc2d1ea137
-
Size
364KB
-
Sample
220830-x2a28agdc7
-
MD5
fe150e03e7787a979bc940cc2d1ea137
-
SHA1
94be16a3996bc2e211356ded423e4aeb6c8c66d5
-
SHA256
b64b20967c8e765ca3dca96d68758d94ac521008944e73b8e4f077fa3cbb395b
-
SHA512
6b8501d1b9312ac4d2ea3fc8842688f117b25a559038d0256d03910193b992c42350375d05dbba0dd6a673d31ad5428d3c7635e6b50773b56d633e88c4a7b827
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPMpnoRnLaWJYhCf5kycWqIxJ:EagCkDC2nLYkRkipxErZI5
Static task
static1
Behavioral task
behavioral1
Sample
fe150e03e7787a979bc940cc2d1ea137.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
fe150e03e7787a979bc940cc2d1ea137
-
Size
364KB
-
MD5
fe150e03e7787a979bc940cc2d1ea137
-
SHA1
94be16a3996bc2e211356ded423e4aeb6c8c66d5
-
SHA256
b64b20967c8e765ca3dca96d68758d94ac521008944e73b8e4f077fa3cbb395b
-
SHA512
6b8501d1b9312ac4d2ea3fc8842688f117b25a559038d0256d03910193b992c42350375d05dbba0dd6a673d31ad5428d3c7635e6b50773b56d633e88c4a7b827
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPMpnoRnLaWJYhCf5kycWqIxJ:EagCkDC2nLYkRkipxErZI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-