Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

fffd8bd79c...cf.exe

windows7-x64

10

fffd8bd79c...cf.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fffd8bd79c78c65b481ca9d013e250431e412c5d527e26d464befb4b2d2479cf

  • Size

    112KB

  • Sample

    221014-nddnrscgg8

  • MD5

    73c60143804d379526be7fad06fa6f2d

  • SHA1

    c01806dc5be8305945a2441be87bd3c92d29042a

  • SHA256

    fffd8bd79c78c65b481ca9d013e250431e412c5d527e26d464befb4b2d2479cf

  • SHA512

    b7a1be8ab8a6c910f24e884bd21515a9934099e9050273482a97cf21c6d9eafef192359e624ee9fa96a8099e1623561632ae79bc745da8e9f1e1d4c323fb6a13

  • SSDEEP

    1536:X/XOq1IMgZomS878feVIwM4kWzrr40ikX7AYaFlGQHidCO9uZxAZCAkqq4BQduxz:XbOomS+8fOd42M/kdv1CUbnNBfge

Score
10/10
salitybackdoorupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

    • Target

      fffd8bd79c78c65b481ca9d013e250431e412c5d527e26d464befb4b2d2479cf

    • Size

      112KB

    • MD5

      73c60143804d379526be7fad06fa6f2d

    • SHA1

      c01806dc5be8305945a2441be87bd3c92d29042a

    • SHA256

      fffd8bd79c78c65b481ca9d013e250431e412c5d527e26d464befb4b2d2479cf

    • SHA512

      b7a1be8ab8a6c910f24e884bd21515a9934099e9050273482a97cf21c6d9eafef192359e624ee9fa96a8099e1623561632ae79bc745da8e9f1e1d4c323fb6a13

    • SSDEEP

      1536:X/XOq1IMgZomS878feVIwM4kWzrr40ikX7AYaFlGQHidCO9uZxAZCAkqq4BQduxz:XbOomS+8fOd42M/kdv1CUbnNBfge

    Score
    10/10
    salitybackdoorupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks