General

  • Target

    68741dc80a80a7ae6985187c7c8e1287f5617969f2e284e738508eac3fb7729b

  • Size

    83KB

  • MD5

    a209bda9f6e9b2a2e75fc4a115c0cbf1

  • SHA1

    1912f07f8da65bc32292af37c8edc62ef5947b8c

  • SHA256

    68741dc80a80a7ae6985187c7c8e1287f5617969f2e284e738508eac3fb7729b

  • SHA512

    563bb2ee13c439cac548cdf86a136cc0bddc55f087ea6abfae8836055a86839b217678f675295fbc3e3734d79f0015e004c81614a4a163e3659bcd2090709a97

  • SSDEEP

    1536:yU8cO7u2NbvdOc8VKUaOdNdRzMWlfRRQvK9KA1E:yU5UNZLKzpM8fRKA1

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 68741dc80a80a7ae6985187c7c8e1287f5617969f2e284e738508eac3fb7729b
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections