General
-
Target
0e28e32a47c36d34abd5633d01c49c7a
-
Size
356KB
-
Sample
220830-xzyqhaeffr
-
MD5
0e28e32a47c36d34abd5633d01c49c7a
-
SHA1
471ee07ae19bf60d7a07de2069c825b3c5feade5
-
SHA256
a00de9c4fb4b122b79175ef03167f9e9372a0fab63454a2c6626debf1baca4c4
-
SHA512
35da9437b5eadc9f6de8bce07ddedac3c5e46aed0dac983d0b05f5e797b52fb537e6749dc8cea2445d81f845d3220a8c6b6389f9e306fd9eac1fc16318091e60
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgP8e5GVoLzhuf5kE4/94z5Buz:EagCkDGuYRkD949ErqI5
Static task
static1
Behavioral task
behavioral1
Sample
0e28e32a47c36d34abd5633d01c49c7a.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
0e28e32a47c36d34abd5633d01c49c7a
-
Size
356KB
-
MD5
0e28e32a47c36d34abd5633d01c49c7a
-
SHA1
471ee07ae19bf60d7a07de2069c825b3c5feade5
-
SHA256
a00de9c4fb4b122b79175ef03167f9e9372a0fab63454a2c6626debf1baca4c4
-
SHA512
35da9437b5eadc9f6de8bce07ddedac3c5e46aed0dac983d0b05f5e797b52fb537e6749dc8cea2445d81f845d3220a8c6b6389f9e306fd9eac1fc16318091e60
-
SSDEEP
6144:EyH7xOc6H5c6HcT66vlml/SI01Jq3ggxDDwCkTTgP8e5GVoLzhuf5kE4/94z5Buz:EagCkDGuYRkD949ErqI5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-