General
-
Target
011d817a8d7965ba8bf25617e94e053cee87f1b783017dfcb0116bd50843c9f7
-
Size
1.2MB
-
Sample
221003-fjgcvaggc4
-
MD5
1b1970647ef2ef5e17b67e5c29c797a8
-
SHA1
de5c02e909223b29a2a8c4d795e7639727d0df06
-
SHA256
011d817a8d7965ba8bf25617e94e053cee87f1b783017dfcb0116bd50843c9f7
-
SHA512
453fd2974dde7110576f9f650f18eca5706b7fcdee103a6b283b61df0c1634f2cf555ea56644a3007793ad338cf66b3c3da0de2355fb2a36a8d181e0b4765c2c
-
SSDEEP
24576:ZS1Xq5oMxw1wkGbpn2nu8bJ3yPwS7E5ElsT0HOJSz5rEN8RidO0T:iVMx6J3yoS7E5ElsT0oSz5rEN8RkT
Static task
static1
Behavioral task
behavioral1
Sample
011d817a8d7965ba8bf25617e94e053cee87f1b783017dfcb0116bd50843c9f7.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
011d817a8d7965ba8bf25617e94e053cee87f1b783017dfcb0116bd50843c9f7
-
Size
1.2MB
-
MD5
1b1970647ef2ef5e17b67e5c29c797a8
-
SHA1
de5c02e909223b29a2a8c4d795e7639727d0df06
-
SHA256
011d817a8d7965ba8bf25617e94e053cee87f1b783017dfcb0116bd50843c9f7
-
SHA512
453fd2974dde7110576f9f650f18eca5706b7fcdee103a6b283b61df0c1634f2cf555ea56644a3007793ad338cf66b3c3da0de2355fb2a36a8d181e0b4765c2c
-
SSDEEP
24576:ZS1Xq5oMxw1wkGbpn2nu8bJ3yPwS7E5ElsT0HOJSz5rEN8RidO0T:iVMx6J3yoS7E5ElsT0oSz5rEN8RkT
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-