General
-
Target
c1d823192f4a0b05cb6c11b65f02c20421fdaa9acd98568269784c7f23be0040
-
Size
173KB
-
Sample
221021-njeg9ahffr
-
MD5
10b704217cde743100df3fe10f6403a0
-
SHA1
b346bd15bebac1c98d27d541646f8f575b4ca441
-
SHA256
c1d823192f4a0b05cb6c11b65f02c20421fdaa9acd98568269784c7f23be0040
-
SHA512
c0de87a5a0f59ecea6856a4e878e46130a522bec59e09ecbc038cc26085965423e9a846ffbd725f5c5fa59bdf749569d2f3112541e375b84f8fd1c6b35e66ded
-
SSDEEP
3072:Yq/ISpAbGTe2Aq/tqiqZ/4YTi3wJSyjX2F5aOHGRS+mxeSP1A:YqRAbgeFZAdIT65aO8S+zSP1A
Static task
static1
Behavioral task
behavioral1
Sample
c1d823192f4a0b05cb6c11b65f02c20421fdaa9acd98568269784c7f23be0040.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
c1d823192f4a0b05cb6c11b65f02c20421fdaa9acd98568269784c7f23be0040
-
Size
173KB
-
MD5
10b704217cde743100df3fe10f6403a0
-
SHA1
b346bd15bebac1c98d27d541646f8f575b4ca441
-
SHA256
c1d823192f4a0b05cb6c11b65f02c20421fdaa9acd98568269784c7f23be0040
-
SHA512
c0de87a5a0f59ecea6856a4e878e46130a522bec59e09ecbc038cc26085965423e9a846ffbd725f5c5fa59bdf749569d2f3112541e375b84f8fd1c6b35e66ded
-
SSDEEP
3072:Yq/ISpAbGTe2Aq/tqiqZ/4YTi3wJSyjX2F5aOHGRS+mxeSP1A:YqRAbgeFZAdIT65aO8S+zSP1A
-
Modifies firewall policy service
-
Possible privilege escalation attempt
-
Modifies file permissions
-