General

  • Target

    809668c91b9146386273a79838025dd7276e47fa7b8bdf4cc850d11bc6d32885

  • Size

    72KB

  • MD5

    496eb4f8ca8f2cf48c6a319b0a1f6061

  • SHA1

    1e4eacbedbc99658ddcbfb23ff53db6dbfbf5540

  • SHA256

    809668c91b9146386273a79838025dd7276e47fa7b8bdf4cc850d11bc6d32885

  • SHA512

    8143a9cf774dc5d52458326444b60d9b0f86030b76c065803ca8ef7adde16e3a7830d0b3a5d17f71e9b854aa668c0d7bbc72af952e1715407c7b682ae8902093

  • SSDEEP

    1536:yU8cO7u2NbvdOc8VKUaOdNdRzMDMQ2gN:yU5UNZLKzpMck

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 809668c91b9146386273a79838025dd7276e47fa7b8bdf4cc850d11bc6d32885
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections