General
-
Target
40307cdd5d1391b1a8f6776d69670f40a75aaa5e5c8698210d3814ede70bec85
-
Size
156KB
-
Sample
221123-vxvvqadb9y
-
MD5
269bab29dd9df4b292bce37a967d4d98
-
SHA1
09d35d3486eb5c1a955e355c37b9b996d1b4ee69
-
SHA256
40307cdd5d1391b1a8f6776d69670f40a75aaa5e5c8698210d3814ede70bec85
-
SHA512
1e87dcfe30a7150e43d4d2c855ac5bbede3e3de3aba69fff660c428b93b8d84ecdefef135cfe7b757c140eada09c8fe6e29bdcebc101cb543ecf3707018ea036
-
SSDEEP
3072:Yhg3BjQeCzTmg3LBsL3Koa+iiDBiCks4VHDx1r8pSuModzP/YOgTDfnXmN/7H:dRvCzTmwE3itsqjxruMiHYx3WJ7H
Static task
static1
Behavioral task
behavioral1
Sample
40307cdd5d1391b1a8f6776d69670f40a75aaa5e5c8698210d3814ede70bec85.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
40307cdd5d1391b1a8f6776d69670f40a75aaa5e5c8698210d3814ede70bec85
-
Size
156KB
-
MD5
269bab29dd9df4b292bce37a967d4d98
-
SHA1
09d35d3486eb5c1a955e355c37b9b996d1b4ee69
-
SHA256
40307cdd5d1391b1a8f6776d69670f40a75aaa5e5c8698210d3814ede70bec85
-
SHA512
1e87dcfe30a7150e43d4d2c855ac5bbede3e3de3aba69fff660c428b93b8d84ecdefef135cfe7b757c140eada09c8fe6e29bdcebc101cb543ecf3707018ea036
-
SSDEEP
3072:Yhg3BjQeCzTmg3LBsL3Koa+iiDBiCks4VHDx1r8pSuModzP/YOgTDfnXmN/7H:dRvCzTmwE3itsqjxruMiHYx3WJ7H
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-