General

  • Target

    c7e5296a2bd9be8b22a27f291cdc96fe0e6fa69f69e96e7c1473b53e9941941d

  • Size

    66KB

  • MD5

    641c498b6d82a74f98c29844aa748851

  • SHA1

    e79c2817cfebb067830761b0e0cd3ea6ef6beb47

  • SHA256

    c7e5296a2bd9be8b22a27f291cdc96fe0e6fa69f69e96e7c1473b53e9941941d

  • SHA512

    bbef4cbee11f14bd33ab40c1944cb6055af34a1576a27ad966f11bca9c6fd1bc05ce45d196b82bda9d62e578dc57111210030846e2c7fa18353654b29229bcb9

  • SSDEEP

    1536:pU8cO7u2NbvdOc8VKUaOdNeRzFKXKbFJdX:pU5UNZLKQpFoKTdX

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • c7e5296a2bd9be8b22a27f291cdc96fe0e6fa69f69e96e7c1473b53e9941941d
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections