sality | 84139c6079306b98f9429272615d0038efea37e48d2784e30bda00ddbc10d024 | Triage

Sharing

General

Target

84139c6079306b98f9429272615d0038efea37e48d2784e30bda00ddbc10d024
Size

200KB
Sample

221123-z34f9she5s
MD5

451f9e46c1d72d59c131d10a5141e31c
SHA1

2d6dfebf442880f528b44703ef3140920b546dc2
SHA256

84139c6079306b98f9429272615d0038efea37e48d2784e30bda00ddbc10d024
SHA512

25d1b56b58faa068c1a53ed682ac38c8bd7dc4ef968199ec3b446c3c0543c2ea7adf84959a00e0e3d8aba255ff8d807700f19e53a0ef2c4078ff693702b84322
SSDEEP

3072:cKKb1edk0bT5ni+lRd4ESGf4Fv5NR2OnCW8DCUck/CJcd+F9UK/r1F2aTwXZg0by:cKKbZyNi+Rb6AaJkru99

Score

10^/10

sality backdoor upx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

- Target
  
  84139c6079306b98f9429272615d0038efea37e48d2784e30bda00ddbc10d024
- Size
  
  200KB
- MD5
  
  451f9e46c1d72d59c131d10a5141e31c
- SHA1
  
  2d6dfebf442880f528b44703ef3140920b546dc2
- SHA256
  
  84139c6079306b98f9429272615d0038efea37e48d2784e30bda00ddbc10d024
- SHA512
  
  25d1b56b58faa068c1a53ed682ac38c8bd7dc4ef968199ec3b446c3c0543c2ea7adf84959a00e0e3d8aba255ff8d807700f19e53a0ef2c4078ff693702b84322
- SSDEEP
  
  3072:cKKb1edk0bT5ni+lRd4ESGf4Fv5NR2OnCW8DCUck/CJcd+F9UK/r1F2aTwXZg0by:cKKbZyNi+Rb6AaJkru99
Score

10^/10

sality backdoor upx
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

salitybackdoorupx