General

  • Target

    44d2d9b4ad8ca400c11cb43dffbd25a4f444d1ef65bbf8f0ab0c4ef813fe14c2

  • Size

    66KB

  • MD5

    63e72591026eeb3115296cd13f1cc120

  • SHA1

    9b4d30c9aae4234d8cbcb8a78f41d8f4791d8802

  • SHA256

    44d2d9b4ad8ca400c11cb43dffbd25a4f444d1ef65bbf8f0ab0c4ef813fe14c2

  • SHA512

    600c00d5d63b8c2246a9a54aaced4490cd640de062bc4b57687b44af7d040540539b0b3b71a7e3c73c8624a85833c6655b13209506ae5d74968c2c623e9ef7e8

  • SSDEEP

    768:XBJoE0ocUJGpOn/WidpYovw5Lidq4BKXUa4uGLWMBayyTLiPjiV4trN2nkkdA:RJf0oRUOn/W0Fvwgd7BKUalBMIxP32

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 44d2d9b4ad8ca400c11cb43dffbd25a4f444d1ef65bbf8f0ab0c4ef813fe14c2
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections