General

  • Target

    176395478431762e6cc2b82c3f491917c690f3fa5fd84579c3d452e4dd684719

  • Size

    62KB

  • MD5

    7744f7042cf4d4fa59c8df2c64b3d346

  • SHA1

    21f0e57c4fbdd81b7dad113f27df656c1f80b7f9

  • SHA256

    176395478431762e6cc2b82c3f491917c690f3fa5fd84579c3d452e4dd684719

  • SHA512

    86d293be0cb84bdcc8664c9472f3b9bada473738468d44a2d07291516b4d597002f43e264726ffe2f82dd5141f02cae5650f5e634c2878146bddd2f25f8c112e

  • SSDEEP

    1536:yU8cO7u2NbvdOc8VKUaOdNdRzMc1yE6LqY:yU5UNZLKzpMckE6G

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 176395478431762e6cc2b82c3f491917c690f3fa5fd84579c3d452e4dd684719
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections