General
-
Target
97f18f170a32e222fe8780ba0b688459
-
Size
364KB
-
Sample
220830-xzeydsgcc7
-
MD5
97f18f170a32e222fe8780ba0b688459
-
SHA1
c922152ce36c876d51f9d23c911492464388c91d
-
SHA256
7f71e0c5c8d731a85f617fad6347376a7a3793133da4ca4d3f1080e8ccb8a243
-
SHA512
7e4645fc4fa0e1e85fcd01e789ff22c3e4543c32347a5c69652c741b669e2ea804f71386c3d0220cf6f3c9717894659a8b9c18f842e10cc2837ef7f921cdf7c8
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPHOsprSR3f5kiJ0+jNKmYrBi:EagCkDJprmRka0LDrEr8I5
Static task
static1
Behavioral task
behavioral1
Sample
97f18f170a32e222fe8780ba0b688459.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
97f18f170a32e222fe8780ba0b688459
-
Size
364KB
-
MD5
97f18f170a32e222fe8780ba0b688459
-
SHA1
c922152ce36c876d51f9d23c911492464388c91d
-
SHA256
7f71e0c5c8d731a85f617fad6347376a7a3793133da4ca4d3f1080e8ccb8a243
-
SHA512
7e4645fc4fa0e1e85fcd01e789ff22c3e4543c32347a5c69652c741b669e2ea804f71386c3d0220cf6f3c9717894659a8b9c18f842e10cc2837ef7f921cdf7c8
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPHOsprSR3f5kiJ0+jNKmYrBi:EagCkDJprmRka0LDrEr8I5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-