General

  • Target

    26613bbcf571ad6947b5da0a5515c3f0045915b86839ef896d3488796426899b

  • Size

    62KB

  • MD5

    9330d4785346147a1713025edd446b90

  • SHA1

    a191e6aa3fe6f254cfb7ead74dbc192c2478dbbf

  • SHA256

    26613bbcf571ad6947b5da0a5515c3f0045915b86839ef896d3488796426899b

  • SHA512

    38f8fb6a935a120ffe81dfc27019d4d7319349f3ee73036c35b7caa5d8c45fe38c298d08574f8dcb236838e27739958e7b1c2345365aa0e5a2a47a7c7160839a

  • SSDEEP

    768:9L08ueh7Rc3C/jEB5dhF2BcJJgDfZLDcDTOaLG9tq7gFh7jKAn2Z5I/+ZWvXX8l/:7ZRc3/dh4cJJQfZPcDK9h72AiaR/Ml

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 26613bbcf571ad6947b5da0a5515c3f0045915b86839ef896d3488796426899b
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections