General
-
Target
905adf72b0c7d71ac4c117a82834da0144d125b60d727616acd44e98b9e45302
-
Size
348KB
-
Sample
221123-vtfxdsch31
-
MD5
56d20bef1935607f90b5b9ec3ea42798
-
SHA1
fac71455763fc218953ebf1431bd8d15857a5eb1
-
SHA256
905adf72b0c7d71ac4c117a82834da0144d125b60d727616acd44e98b9e45302
-
SHA512
0c143ce56654db3a4bf7247580ee5766f16c17b2b605f10365768b250730f057b85ed4b3c671cdc73e68af84150b3d6267f1a1ed58a71e1a5953dc267bae02f5
-
SSDEEP
6144:LrGABDkpgFSiFng5IN7th9B1BU7Yt15Sl950w:LrGABIgjngGY8t16ew
Static task
static1
Behavioral task
behavioral1
Sample
905adf72b0c7d71ac4c117a82834da0144d125b60d727616acd44e98b9e45302.exe
Resource
win7-20221111-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
http://klkjwre77638dfqwieuoi888.info/
Targets
-
-
Target
905adf72b0c7d71ac4c117a82834da0144d125b60d727616acd44e98b9e45302
-
Size
348KB
-
MD5
56d20bef1935607f90b5b9ec3ea42798
-
SHA1
fac71455763fc218953ebf1431bd8d15857a5eb1
-
SHA256
905adf72b0c7d71ac4c117a82834da0144d125b60d727616acd44e98b9e45302
-
SHA512
0c143ce56654db3a4bf7247580ee5766f16c17b2b605f10365768b250730f057b85ed4b3c671cdc73e68af84150b3d6267f1a1ed58a71e1a5953dc267bae02f5
-
SSDEEP
6144:LrGABDkpgFSiFng5IN7th9B1BU7Yt15Sl950w:LrGABIgjngGY8t16ew
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Adds Run key to start application
-