Overview

overview

10

Static

static

10

f243fab9f6...80.exe

windows7-x64

10

f243fab9f6...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f243fab9f6b54437e213b588e6fb140f33e6df32e90d329603e907f83fd04280

  • Size

    74KB

  • MD5

    69063a730943d9bce87a2d4798d3b3d0

  • SHA1

    06408a4c6e55e86fc86d3ee83f56379910c49775

  • SHA256

    f243fab9f6b54437e213b588e6fb140f33e6df32e90d329603e907f83fd04280

  • SHA512

    91759a93c6cbeca58b79fdab72a3c553242b99edb7b364f742e25ba1881523cfe6cf18e69bd90d703d45f29c298378fe9829701668c530d565ef73632f7f61a7

  • SSDEEP

    1536:7ZRc3/dh4cJJQfZPcDK9h72AiakasYZOY:7wcjc27eYp

Score
10/10
upxsality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Signatures

  • Sality family
    sality
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • f243fab9f6b54437e213b588e6fb140f33e6df32e90d329603e907f83fd04280
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections