Overview

overview

10

Static

static

4dfce31fee...79.exe

windows7-x64

3

4dfce31fee...79.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4dfce31feefd818a075debdad3dcd0579b33ee59941856fef78aa12d01445879

  • Size

    200KB

  • Sample

    221011-12ebesgfa8

  • MD5

    634c0a7fff1356e227dd08cbfc69cc2c

  • SHA1

    87146c51ffd035513d40c8e2ca852e8b330dfd07

  • SHA256

    4dfce31feefd818a075debdad3dcd0579b33ee59941856fef78aa12d01445879

  • SHA512

    3289e76983f48771342aeb5352ae640b2467c93574eec3f6915a67ba2cfc1cabcf868cb8c6172b6ea0f5611104fff3da160efd681f0f83750f883b655e4b5ded

  • SSDEEP

    3072:59pb3B2WXq85Xi+KxtAEyerA9XNh4K2DG+QCiYUMvvZAgBpJSb79V3Sz8LlYcLcn:59pb5a2i+MRi+IYUMPgwm5+

Score
10/10
salitybackdoorupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      4dfce31feefd818a075debdad3dcd0579b33ee59941856fef78aa12d01445879

    • Size

      200KB

    • MD5

      634c0a7fff1356e227dd08cbfc69cc2c

    • SHA1

      87146c51ffd035513d40c8e2ca852e8b330dfd07

    • SHA256

      4dfce31feefd818a075debdad3dcd0579b33ee59941856fef78aa12d01445879

    • SHA512

      3289e76983f48771342aeb5352ae640b2467c93574eec3f6915a67ba2cfc1cabcf868cb8c6172b6ea0f5611104fff3da160efd681f0f83750f883b655e4b5ded

    • SSDEEP

      3072:59pb3B2WXq85Xi+KxtAEyerA9XNh4K2DG+QCiYUMvvZAgBpJSb79V3Sz8LlYcLcn:59pb5a2i+MRi+IYUMPgwm5+

    Score
    10/10
    salitybackdoorupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks