General

  • Target

    6c435a60b2d6265f0e7cb0216d641fe37b75f296f787b73e2f938acb5e7549e8

  • Size

    70KB

  • MD5

    6db5854d3d28e6bfb4bc0a5ccaf6a5f0

  • SHA1

    5cddb9949b6fe935ad40ee4af36cec2c01aec346

  • SHA256

    6c435a60b2d6265f0e7cb0216d641fe37b75f296f787b73e2f938acb5e7549e8

  • SHA512

    dbe90fc5042f2575a795553d7cd24f6c03627ae1740d9dc14e2e9f24cca8cc45f656410658dddd53d9cd704eba6cf1e50b299aaa1cffad94f228e333dc4595f7

  • SSDEEP

    768:a+7KAIYHJygBrDZEWhLOtHGh/wCg1RYpMqhDHGEIZq9+ht/1ILfPDBAyA3KVo5wS:1IYphr7aZG5wCqRqfVIU+riBvA3zH

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 6c435a60b2d6265f0e7cb0216d641fe37b75f296f787b73e2f938acb5e7549e8
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections