Overview

overview

10

Static

static

4da8160edf...b6.exe

windows7-x64

3

4da8160edf...b6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4da8160edf0715769d59b5734148fc9aa70c7097ee73b13ab7e484b6248eb6b6

  • Size

    341KB

  • Sample

    221029-vn6kvsgcdm

  • MD5

    a34cc042fe58fdbff0038fe90a693c00

  • SHA1

    dc0f1fe89bac9498653e980ce688d62460ace554

  • SHA256

    4da8160edf0715769d59b5734148fc9aa70c7097ee73b13ab7e484b6248eb6b6

  • SHA512

    f68f92e2bc3f82fdc2f1c9f56a449225897096519a24814dc3c3dd74ee0c8a5fd1dd9ee64eedf9a84e7f76bf0a7b800f634c79e3addb79a24bde4b9406054c7e

  • SSDEEP

    6144:VTxwWOXoNUK6JLLRZPioF6dnhYogVjs24E1:VTxwXoNOLLR6dn1c1

Score
10/10
salitybackdoorevasiontrojanupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      4da8160edf0715769d59b5734148fc9aa70c7097ee73b13ab7e484b6248eb6b6

    • Size

      341KB

    • MD5

      a34cc042fe58fdbff0038fe90a693c00

    • SHA1

      dc0f1fe89bac9498653e980ce688d62460ace554

    • SHA256

      4da8160edf0715769d59b5734148fc9aa70c7097ee73b13ab7e484b6248eb6b6

    • SHA512

      f68f92e2bc3f82fdc2f1c9f56a449225897096519a24814dc3c3dd74ee0c8a5fd1dd9ee64eedf9a84e7f76bf0a7b800f634c79e3addb79a24bde4b9406054c7e

    • SSDEEP

      6144:VTxwWOXoNUK6JLLRZPioF6dnhYogVjs24E1:VTxwXoNOLLR6dn1c1

    Score
    10/10
    salitybackdoorevasiontrojanupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • UAC bypass

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks