General

  • Target

    af2fe52f73f8ef2d6aa1ce0943ba931b2efffcce827cb977bb2eea63fa33f4d5

  • Size

    66KB

  • MD5

    788ddec7a4f3a8a2276faacfdce745f1

  • SHA1

    6fb20881932f9a073262af0bdfbd0dc00a9a2cf6

  • SHA256

    af2fe52f73f8ef2d6aa1ce0943ba931b2efffcce827cb977bb2eea63fa33f4d5

  • SHA512

    ff2a2e489996e6f35ca911dbe3d70be939e0df874edbabb8114993eb79ca86ef5a0deeae51b7a382bb7b751f9333812579256ef5e35c25f9280caf0da441bdab

  • SSDEEP

    1536:yU8cO7u2NbvdOc8VKUaOdNdRzMDneQOt:yU5UNZLKzpMqV

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • af2fe52f73f8ef2d6aa1ce0943ba931b2efffcce827cb977bb2eea63fa33f4d5
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections