General
-
Target
9b80a0cc515d60ac4b00d9bb4be21025bb7befda39be13d62172a8a3a72ba66d
-
Size
2.0MB
-
Sample
221126-c755bsag5s
-
MD5
8b620f7b70cab1ece6ae613288fd88b9
-
SHA1
8ac0afa3e7204328a2e5e483d1b9934685e55d32
-
SHA256
9b80a0cc515d60ac4b00d9bb4be21025bb7befda39be13d62172a8a3a72ba66d
-
SHA512
47e8995ee18de0e3b43060db12a2e925e7791e61318303fc24ce2fc39aec5bba9a551b07cfc956dad388da91b777d5379854351e04adb300e5b600386a70c089
-
SSDEEP
49152:7dKzRTqdtEIoH+uLyhgCm5oOqI5oK/qAKti7IBf:pKzJqdtEIm3YgeOiAKi7IBf
Behavioral task
behavioral1
Sample
9b80a0cc515d60ac4b00d9bb4be21025bb7befda39be13d62172a8a3a72ba66d.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
9b80a0cc515d60ac4b00d9bb4be21025bb7befda39be13d62172a8a3a72ba66d
-
Size
2.0MB
-
MD5
8b620f7b70cab1ece6ae613288fd88b9
-
SHA1
8ac0afa3e7204328a2e5e483d1b9934685e55d32
-
SHA256
9b80a0cc515d60ac4b00d9bb4be21025bb7befda39be13d62172a8a3a72ba66d
-
SHA512
47e8995ee18de0e3b43060db12a2e925e7791e61318303fc24ce2fc39aec5bba9a551b07cfc956dad388da91b777d5379854351e04adb300e5b600386a70c089
-
SSDEEP
49152:7dKzRTqdtEIoH+uLyhgCm5oOqI5oK/qAKti7IBf:pKzJqdtEIm3YgeOiAKi7IBf
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-