General
-
Target
1576-55-0x0000000001DB0000-0x0000000002E6A000-memory.dmp
-
Size
16.7MB
-
MD5
0dfebed00428b40dfbaa6f90a69b1f6a
-
SHA1
f0ba02258f07abdb939f0535ef677c45baf6e4b1
-
SHA256
f5b0060c85b8a4ce2d0604ae99b2aa2b2f35905f4ae05c167c2f80440fab3254
-
SHA512
be7854f1eceaa2d031bb9c848bfaeb67f56c921d8d06b23110bf0a4ae21dc98fc6fa6761b437c90f23f08ffa86f760ca2b16df998cb36e1abd0b767219a65432
-
SSDEEP
3072:NIBhs0MhimF1VgMrlOjYIWV5Kuy9EoX+Tt2p:NIBhsXDVgIlOjYIi5KuZoX+Tta
Score
10/10
Malware Config
Extracted
Family
sality
C2
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Signatures
-
Sality family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Files
-
1576-55-0x0000000001DB0000-0x0000000002E6A000-memory.dmp
Headers
Sections