General
-
Target
e9ee56f1204a817bc1cd5b0750ad06d34d8b944a6c8a7814229dc4045f3db6d0
-
Size
851KB
-
Sample
221128-vdflpaeb9s
-
MD5
1a1b77b91d620031b66b6c021cd0f58e
-
SHA1
07d91148c4381117444724271033ed84133a25e9
-
SHA256
e9ee56f1204a817bc1cd5b0750ad06d34d8b944a6c8a7814229dc4045f3db6d0
-
SHA512
790bbfe8b099fd0460b19d7e9fca2c45f4d60920e61ff2d701f85b75dfe14324d9d6e6feb04cb3068549fca59a4e99667b3ccbe1cd5ff0921b3c539ff5f019af
-
SSDEEP
1536:uyBOe/hiH+WMtg2Vc/r6z5vIu2OzwZ+cVLJnzJsM1Y8Ar0WZ0v1sZVPptT:uMOe/hiOdc/rIZ6O6+cTNsM1FK0KVPp
Behavioral task
behavioral1
Sample
e9ee56f1204a817bc1cd5b0750ad06d34d8b944a6c8a7814229dc4045f3db6d0.exe
Resource
win7-20220812-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
e9ee56f1204a817bc1cd5b0750ad06d34d8b944a6c8a7814229dc4045f3db6d0
-
Size
851KB
-
MD5
1a1b77b91d620031b66b6c021cd0f58e
-
SHA1
07d91148c4381117444724271033ed84133a25e9
-
SHA256
e9ee56f1204a817bc1cd5b0750ad06d34d8b944a6c8a7814229dc4045f3db6d0
-
SHA512
790bbfe8b099fd0460b19d7e9fca2c45f4d60920e61ff2d701f85b75dfe14324d9d6e6feb04cb3068549fca59a4e99667b3ccbe1cd5ff0921b3c539ff5f019af
-
SSDEEP
1536:uyBOe/hiH+WMtg2Vc/r6z5vIu2OzwZ+cVLJnzJsM1Y8Ar0WZ0v1sZVPptT:uMOe/hiOdc/rIZ6O6+cTNsM1FK0KVPp
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Adds Run key to start application
-