General

  • Target

    62bbb31e4160f1df88f20f3567865c5de2dc0d61ee5abccf4ec92285da2cb0f9

  • Size

    86KB

  • MD5

    7d4329d0a36ec14b0d455c277052fd90

  • SHA1

    d546ebe1c3377c159dcc734eaed1db7f26e793d3

  • SHA256

    62bbb31e4160f1df88f20f3567865c5de2dc0d61ee5abccf4ec92285da2cb0f9

  • SHA512

    3a166bc6a34986bac00b2efd1fadbed9e4af246cb274f4451f7c20d16c81d95afb8313221e9d76b013a65797be3f4860ef96f035fd349cb781033f425093f816

  • SSDEEP

    768:XBJoE0ocUJGpOn/WidpYovw5Lidq4BKXUa4uGLWMBayyTLiPjiV4trN2nkkdA/n:RJf0oRUOn/W0Fvwgd7BKUalBMIxP32/

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 62bbb31e4160f1df88f20f3567865c5de2dc0d61ee5abccf4ec92285da2cb0f9
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections