General
-
Target
a4f58cd887953173b384ab2e7d557198
-
Size
356KB
-
Sample
220830-xzktmseffl
-
MD5
a4f58cd887953173b384ab2e7d557198
-
SHA1
a863832f59f5537b26af7e22ce8b1be412308bb2
-
SHA256
1d9bd5fdb3ab06f20d2f247ca4c0c866eda29b5f715c3d080ef8747b9f8c9032
-
SHA512
72741741c11b1faa333081d2a9c6d3fb623d20858fb9d951dabcd6e348439c95af0403d73c67def7a4d1af4d9de46c52089fff453c6ca6b8d9e28f3ee3ca8cc8
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPxyenrYYf5kSbiUXqBurgIXU:EagCkD790YRkSxXqErFI5
Static task
static1
Behavioral task
behavioral1
Sample
a4f58cd887953173b384ab2e7d557198.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
a4f58cd887953173b384ab2e7d557198
-
Size
356KB
-
MD5
a4f58cd887953173b384ab2e7d557198
-
SHA1
a863832f59f5537b26af7e22ce8b1be412308bb2
-
SHA256
1d9bd5fdb3ab06f20d2f247ca4c0c866eda29b5f715c3d080ef8747b9f8c9032
-
SHA512
72741741c11b1faa333081d2a9c6d3fb623d20858fb9d951dabcd6e348439c95af0403d73c67def7a4d1af4d9de46c52089fff453c6ca6b8d9e28f3ee3ca8cc8
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPxyenrYYf5kSbiUXqBurgIXU:EagCkD790YRkSxXqErFI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-