General

  • Target

    1a22b4f31bddf67cc910688e0b296604cebe2147656213e0808bacaae916e3ea

  • Size

    74KB

  • MD5

    613cc9504d5c93f803c57bbdc5d5e540

  • SHA1

    e2fdb20a53f732a15a3aaf66213fce7c255bfcda

  • SHA256

    1a22b4f31bddf67cc910688e0b296604cebe2147656213e0808bacaae916e3ea

  • SHA512

    d65cb631539ff76bb384ec2e09cfa7e1ed051edea08b018527220fad5d4753952f514fc7be605314434ef9d88f6a9e248d5841d4877b46814c3c08583c053850

  • SSDEEP

    1536:RJf0oRUOn/W0Fvwgd7BKUalBMIxP32pwhC:RJf0gn1Fvwg9BsBTP32m

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 1a22b4f31bddf67cc910688e0b296604cebe2147656213e0808bacaae916e3ea
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections