General
-
Target
586f9bf1c139ce3c0efb35136267bca8
-
Size
360KB
-
Sample
220830-xzs51sgce3
-
MD5
586f9bf1c139ce3c0efb35136267bca8
-
SHA1
11ced437e8a008d39a98ef2b9f79f5d3f493b324
-
SHA256
6c8c33865b9eedbaa85f34cd386f71806652125b359c7ee45f31bffab54c895e
-
SHA512
8c77c6f832f52136b5b9166c7f46758a4a7db8f53d2568d317a2c694a7151e4ee82a3406d776ebd79339faacfcdcdf622bdb4a56d4428ba0c9b3f7f3c19c0080
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPmYYIOf5kswul2e55BurgIiU:EagCkD/sRkyln5ErsI5
Static task
static1
Behavioral task
behavioral1
Sample
586f9bf1c139ce3c0efb35136267bca8.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
586f9bf1c139ce3c0efb35136267bca8
-
Size
360KB
-
MD5
586f9bf1c139ce3c0efb35136267bca8
-
SHA1
11ced437e8a008d39a98ef2b9f79f5d3f493b324
-
SHA256
6c8c33865b9eedbaa85f34cd386f71806652125b359c7ee45f31bffab54c895e
-
SHA512
8c77c6f832f52136b5b9166c7f46758a4a7db8f53d2568d317a2c694a7151e4ee82a3406d776ebd79339faacfcdcdf622bdb4a56d4428ba0c9b3f7f3c19c0080
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgPmYYIOf5kswul2e55BurgIiU:EagCkD/sRkyln5ErsI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-