General

  • Target

    c57e6458e5b67f95486233ea62f7f172625338c2a5aafe6823808a04aaab8790

  • Size

    66KB

  • MD5

    2f2f29b7d3d1b692a79d75486ef22b61

  • SHA1

    d946453afa64f6e6a77e56e48c9ac8504f10e8ac

  • SHA256

    c57e6458e5b67f95486233ea62f7f172625338c2a5aafe6823808a04aaab8790

  • SHA512

    1ce00c87e006d4459a5abf68f245e50878198ae843143dce391418d47307187bd43912861612a43208f108cb52ee0fcdfa01b3db17b68e02317c5f2b1cadab2d

  • SSDEEP

    768:9L08ueh7Rc3C/jEB5dhF2BcJJgDfZLDcDTOaLG9tq7gFh7jKAn2Z5I/GUO4iZ:7ZRc3/dh4cJJQfZPcDK9h72AiaGb

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • c57e6458e5b67f95486233ea62f7f172625338c2a5aafe6823808a04aaab8790
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections