General

  • Target

    ad3706f50509c46f82da42f913a5c0b16a21c77e036c94ffd21e0089e1306430

  • Size

    68KB

  • MD5

    635a041075f690d8e194c6477e225171

  • SHA1

    c5d2ccf4dafa0129ae20558c0d9db116cb057986

  • SHA256

    ad3706f50509c46f82da42f913a5c0b16a21c77e036c94ffd21e0089e1306430

  • SHA512

    3db02f72e5763ca5a74032f115b95e661a75f1dc5320d60833d139da1a3ea5dd8d6cd0c9b3b0561dcc3f4b92c1aecc2b9f2ce9e6ae3ab69aaba3fa2eac903312

  • SSDEEP

    768:oBkfKY4umiPCAcdBrq06iqmNKzshw0xTJYc8VKU0n7OdwmdZfB5AVP0LdsNLbGA:yU8cO7u2NbvdOc8VKUaOdNdRzMP3

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • ad3706f50509c46f82da42f913a5c0b16a21c77e036c94ffd21e0089e1306430
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections