General
-
Target
d7bc348222208ed5cc441937945fea28fb20ed0946afd0425019ba404d7f537c
-
Size
256KB
-
Sample
221128-yfad8sbh46
-
MD5
7d32331219cb2a0bf5486a2310032d60
-
SHA1
a5c14a839a3a653956658bb0bbdb647b8e58e605
-
SHA256
d7bc348222208ed5cc441937945fea28fb20ed0946afd0425019ba404d7f537c
-
SHA512
58877f0d1e2b193f6cdb50ae289c4c3bd3d2b25dc210493b6619a72e33f467f835e6cbb8b6d3f3563b1a9263128de1cb88bb86d21eecdfd9fb69e813812b6550
-
SSDEEP
3072:Br6W2wIcju6IIXlNPQmTh907Y6lP/8qkrHKheNN8BZHImDN9RJMs2B8DQMdCCvAi:J6gI4u6lXnxh65QRN8BBIls9QMdCCIJc
Static task
static1
Behavioral task
behavioral1
Sample
d7bc348222208ed5cc441937945fea28fb20ed0946afd0425019ba404d7f537c.exe
Resource
win7-20221111-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
d7bc348222208ed5cc441937945fea28fb20ed0946afd0425019ba404d7f537c
-
Size
256KB
-
MD5
7d32331219cb2a0bf5486a2310032d60
-
SHA1
a5c14a839a3a653956658bb0bbdb647b8e58e605
-
SHA256
d7bc348222208ed5cc441937945fea28fb20ed0946afd0425019ba404d7f537c
-
SHA512
58877f0d1e2b193f6cdb50ae289c4c3bd3d2b25dc210493b6619a72e33f467f835e6cbb8b6d3f3563b1a9263128de1cb88bb86d21eecdfd9fb69e813812b6550
-
SSDEEP
3072:Br6W2wIcju6IIXlNPQmTh907Y6lP/8qkrHKheNN8BZHImDN9RJMs2B8DQMdCCvAi:J6gI4u6lXnxh65QRN8BBIls9QMdCCIJc
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Loads dropped DLL
-