General

  • Target

    f2b4e7acc2ab278b4d193368d9404dbb2997dbcfcdc556e28e28708cc3655006

  • Size

    63KB

  • MD5

    676f1d2905a59aed16d8847249f5bd91

  • SHA1

    7ba0868262ad0d8354b46171deb14a6853547d51

  • SHA256

    f2b4e7acc2ab278b4d193368d9404dbb2997dbcfcdc556e28e28708cc3655006

  • SHA512

    c96db92d260bc408da4241656a054b3d3a1e7a1f76d4dffdf5a6d677d8fabd22da7b76b019b92fe1f192e47ad128c095f7a870bac0fc86d23e501bdf645a9615

  • SSDEEP

    1536:yU8cO7u2NbvdOc8VKUaOdNdRzM0ArwZnyk:yU5UNZLKzpM0mAyk

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • f2b4e7acc2ab278b4d193368d9404dbb2997dbcfcdc556e28e28708cc3655006
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections