General

  • Target

    50bd2176119902305fdea9efdbbb66a4924ed59336e63cb604cc4a928459bfe6

  • Size

    58KB

  • MD5

    6768ced9792513230fe24dc4fc2fcf60

  • SHA1

    400b03eb0a3d619959a8ef3afa9a1328542724a9

  • SHA256

    50bd2176119902305fdea9efdbbb66a4924ed59336e63cb604cc4a928459bfe6

  • SHA512

    034bc952c55ffbe8cd8169b863adf068c64007a36c81a6eadfcfac652a5baf89db5be0ae7f7b45d91a5210a982f74ff4359aedb04012baf623815df15da2c035

  • SSDEEP

    768:9L08ueh7Rc3C/jEB5dhF2BcJJgDfZLDcDTOaLG9tq7gFh7jKAn2Z5I/V1Q:7ZRc3/dh4cJJQfZPcDK9h72AiaVW

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 50bd2176119902305fdea9efdbbb66a4924ed59336e63cb604cc4a928459bfe6
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections