Overview

overview

10

Static

static

10

b2e33871a5...79.exe

windows7-x64

10

b2e33871a5...79.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b2e33871a54f1d27532c5e7c64ebcbc91142e2e9dea6992970e5f75436b6a379

  • Size

    70KB

  • MD5

    0aa3c7a82c99ca7748548eb92db37ea0

  • SHA1

    1017f1c34e1eceaf7f1a0f466feff96741cf4735

  • SHA256

    b2e33871a54f1d27532c5e7c64ebcbc91142e2e9dea6992970e5f75436b6a379

  • SHA512

    72e1298fba19ff6e62c9214a56cfb375763b299b3ad6bb7fb8e3a0007edd95a8fd767e702847940b5ac193439665480d936f543d1cc1d857388bda373c3afe09

  • SSDEEP

    768:oBkfKY4umiPCAcdBrq06iqmNKzshw0xTJYc8VKU0n7OdwmdZfB5AVcjAoSqQm+1:yU8cO7u2NbvdOc8VKUaOdNdRzMvhwU

Score
10/10
upxsality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
    sality
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • b2e33871a54f1d27532c5e7c64ebcbc91142e2e9dea6992970e5f75436b6a379
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections