General

  • Target

    7ba95a8e464bb0848386a4cc1223c80616bbc4a7ecabc8f256d9b18507d2602c

  • Size

    62KB

  • MD5

    043cf7bf539a23466a4db0df2a11a710

  • SHA1

    b6546b78f7e041cc654ac695f4a8422a365396a1

  • SHA256

    7ba95a8e464bb0848386a4cc1223c80616bbc4a7ecabc8f256d9b18507d2602c

  • SHA512

    ee998efee070d986bdcbd479e11ee375f6c1f5483f13881474950512701ae98c56574373d5fc31e6340ac808cce5115a82a643ce3607f1dea548e261662ec7cd

  • SSDEEP

    768:vBkfKY4umiPCAcdBrq06iqmNKzshw0xTJYc8VKU0n7OdwmeZfB5XVtLW2XbCc:pU8cO7u2NbvdOc8VKUaOdNeRzFta2rC

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 7ba95a8e464bb0848386a4cc1223c80616bbc4a7ecabc8f256d9b18507d2602c
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections