General
-
Target
5ec9142610006ac131712ae40a44c19b2d3a9d967d822ed3592c863e8a055a02
-
Size
100KB
-
Sample
221127-b7scssbd29
-
MD5
330590cb3c29c05dee3be4236b550594
-
SHA1
d8cd42f0adf473fd434bc851f87e26d3abfb6f16
-
SHA256
5ec9142610006ac131712ae40a44c19b2d3a9d967d822ed3592c863e8a055a02
-
SHA512
e6cd70e4fbc2fc277d46f33ee8897463180efe466d38a532dd1cbf5ad16f384c82499a2c31186f590a8b7d7347797bc777a11b2eb34e2f82e57d0bc626cd3206
-
SSDEEP
1536:jscbReGErtqOEgZhZyrZuLoC0e2GWikyPU67k4nn3pCtiiteOYeLj9meWod0fXGV:LbRedtaOUuR92qq6o4+mcpmeW/X42S1J
Static task
static1
Behavioral task
behavioral1
Sample
5ec9142610006ac131712ae40a44c19b2d3a9d967d822ed3592c863e8a055a02.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
5ec9142610006ac131712ae40a44c19b2d3a9d967d822ed3592c863e8a055a02
-
Size
100KB
-
MD5
330590cb3c29c05dee3be4236b550594
-
SHA1
d8cd42f0adf473fd434bc851f87e26d3abfb6f16
-
SHA256
5ec9142610006ac131712ae40a44c19b2d3a9d967d822ed3592c863e8a055a02
-
SHA512
e6cd70e4fbc2fc277d46f33ee8897463180efe466d38a532dd1cbf5ad16f384c82499a2c31186f590a8b7d7347797bc777a11b2eb34e2f82e57d0bc626cd3206
-
SSDEEP
1536:jscbReGErtqOEgZhZyrZuLoC0e2GWikyPU67k4nn3pCtiiteOYeLj9meWod0fXGV:LbRedtaOUuR92qq6o4+mcpmeW/X42S1J
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-