General
-
Target
5121161804999ee3c3e2f74c91c1e44ab461319ac0b060e477f73565689eedc8
-
Size
124KB
-
Sample
221128-xz2gdsac75
-
MD5
5400d56735075bea117d21301912e590
-
SHA1
a397b6007ba527322e6932104a0aa6cba3e598ec
-
SHA256
5121161804999ee3c3e2f74c91c1e44ab461319ac0b060e477f73565689eedc8
-
SHA512
ba0737e3258d51f693242a06e222d1fe92cb4378aa6493f1f7450785eded092fbc124d3c92c0caa8181631d71877b29dbf22eb98c3948aa6a8b957fb8dfac724
-
SSDEEP
1536:8ZmDK0gw2f24EgRKzBocDliyuhSMN2PtrwDdZIMhYxZX3Ek88wjlp:imiwXdgw6cDEygcUdm0Y31k
Static task
static1
Behavioral task
behavioral1
Sample
5121161804999ee3c3e2f74c91c1e44ab461319ac0b060e477f73565689eedc8.exe
Resource
win7-20221111-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
5121161804999ee3c3e2f74c91c1e44ab461319ac0b060e477f73565689eedc8
-
Size
124KB
-
MD5
5400d56735075bea117d21301912e590
-
SHA1
a397b6007ba527322e6932104a0aa6cba3e598ec
-
SHA256
5121161804999ee3c3e2f74c91c1e44ab461319ac0b060e477f73565689eedc8
-
SHA512
ba0737e3258d51f693242a06e222d1fe92cb4378aa6493f1f7450785eded092fbc124d3c92c0caa8181631d71877b29dbf22eb98c3948aa6a8b957fb8dfac724
-
SSDEEP
1536:8ZmDK0gw2f24EgRKzBocDliyuhSMN2PtrwDdZIMhYxZX3Ek88wjlp:imiwXdgw6cDEygcUdm0Y31k
-
Modifies visibility of file extensions in Explorer
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Adds Run key to start application
-