General
-
Target
72d82c1d3804c988d14aed82eac1beae1586e50f07a24ff18d74ba81ea3e3036
-
Size
268KB
-
Sample
221127-xnn2xsfa8x
-
MD5
a1344059a8d19cf8c994d07cd279bbbd
-
SHA1
9055bcf8d3182120c0dcfab93da704e80d347bca
-
SHA256
72d82c1d3804c988d14aed82eac1beae1586e50f07a24ff18d74ba81ea3e3036
-
SHA512
1891a4b1717364474b83bd7871cc67a580d1369f40d6ff69719a0b670717f33bfc65b516c92063eb56fa0391eab6dfac6e7d3b6a70cce4aabf35611e03d2ecff
-
SSDEEP
6144:5ubbXXX/30nXnbkWLORFhQp02XeUDUHsgBMz4e0:5ubbX8nXnbkyOROJuUoHsg+0
Static task
static1
Behavioral task
behavioral1
Sample
72d82c1d3804c988d14aed82eac1beae1586e50f07a24ff18d74ba81ea3e3036.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
72d82c1d3804c988d14aed82eac1beae1586e50f07a24ff18d74ba81ea3e3036
-
Size
268KB
-
MD5
a1344059a8d19cf8c994d07cd279bbbd
-
SHA1
9055bcf8d3182120c0dcfab93da704e80d347bca
-
SHA256
72d82c1d3804c988d14aed82eac1beae1586e50f07a24ff18d74ba81ea3e3036
-
SHA512
1891a4b1717364474b83bd7871cc67a580d1369f40d6ff69719a0b670717f33bfc65b516c92063eb56fa0391eab6dfac6e7d3b6a70cce4aabf35611e03d2ecff
-
SSDEEP
6144:5ubbXXX/30nXnbkWLORFhQp02XeUDUHsgBMz4e0:5ubbX8nXnbkyOROJuUoHsg+0
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Drops file in Drivers directory
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-