General

  • Target

    bf87768db56b7a877dfc280b68e104cf1c352d54809e7d4492553393d25be704

  • Size

    75KB

  • MD5

    0c49484354827762df0aef5e9aec6fb6

  • SHA1

    f98d8c65cfc14df25e7ca341dad66f48f94339c3

  • SHA256

    bf87768db56b7a877dfc280b68e104cf1c352d54809e7d4492553393d25be704

  • SHA512

    fb9023fb7539a8b466931a23866b46d244a28546e8a9fe57c252c3113251002b8e0a6c5228820743a485dbe5a74e1472956fb2a6f2c276f8745c7a12e35fba49

  • SSDEEP

    1536:yU8cO7u2NbvdOc8VKUaOdNdRzMqrcGVpG/fphXa:yU5UNZLKzpMqrcGPG/fja

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • bf87768db56b7a877dfc280b68e104cf1c352d54809e7d4492553393d25be704
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections