General
-
Target
1d8c70fa002a4e437ec4f8150d466e9c
-
Size
360KB
-
Sample
220830-xz4lragcf9
-
MD5
1d8c70fa002a4e437ec4f8150d466e9c
-
SHA1
d0b66be8a701c1cc4e1c0ac5126a1c6f4b81d0ea
-
SHA256
005723b349a3f97cded2935a289fff7f58e6d417ecc9772f865a89939a79d45f
-
SHA512
051220b4f56d103e56d484e68a92b68cdd5611a5226a5be8c2e521630874be04234cf02c2af6e636f03d5b78286e5ef9c5dd131cf8d9ba3e369f4105fe194f09
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPf9X8wVQTf5kkVHAauBurgIC:EagCkDDVQTRkkHwErPI5
Static task
static1
Behavioral task
behavioral1
Sample
1d8c70fa002a4e437ec4f8150d466e9c.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
1d8c70fa002a4e437ec4f8150d466e9c
-
Size
360KB
-
MD5
1d8c70fa002a4e437ec4f8150d466e9c
-
SHA1
d0b66be8a701c1cc4e1c0ac5126a1c6f4b81d0ea
-
SHA256
005723b349a3f97cded2935a289fff7f58e6d417ecc9772f865a89939a79d45f
-
SHA512
051220b4f56d103e56d484e68a92b68cdd5611a5226a5be8c2e521630874be04234cf02c2af6e636f03d5b78286e5ef9c5dd131cf8d9ba3e369f4105fe194f09
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPf9X8wVQTf5kkVHAauBurgIC:EagCkDDVQTRkkHwErPI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-