Overview

overview

10

Static

static

e34471aae7...89.exe

windows7-x64

10

e34471aae7...89.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e34471aae748b5f167bac890f514a13155fd2262f40f33b6400af2f0b8a3b389

  • Size

    217KB

  • Sample

    221204-bvnh3sab9t

  • MD5

    34c8cf9c9a2ca3449230c6bdcd366f60

  • SHA1

    b1a9d2a19661c27411c69e1c52194f38ae228c29

  • SHA256

    e34471aae748b5f167bac890f514a13155fd2262f40f33b6400af2f0b8a3b389

  • SHA512

    66229f4f30bc378524a322ac841db8f80e9180ac348797cb65ded46cf969558d0d861e2456673b3a742bfbd664548c2d1c15e3eb27774ff066a866d0468ea056

  • SSDEEP

    6144:Ui3cQ+Oq2yWGX65qhFB88oI5/ZIZcyQf/DG8x5I:UXKq2ydK5yr88oI5/Zs/Qfy8xS

Score
10/10
salitybackdoorevasiontrojanupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

    • Target

      e34471aae748b5f167bac890f514a13155fd2262f40f33b6400af2f0b8a3b389

    • Size

      217KB

    • MD5

      34c8cf9c9a2ca3449230c6bdcd366f60

    • SHA1

      b1a9d2a19661c27411c69e1c52194f38ae228c29

    • SHA256

      e34471aae748b5f167bac890f514a13155fd2262f40f33b6400af2f0b8a3b389

    • SHA512

      66229f4f30bc378524a322ac841db8f80e9180ac348797cb65ded46cf969558d0d861e2456673b3a742bfbd664548c2d1c15e3eb27774ff066a866d0468ea056

    • SSDEEP

      6144:Ui3cQ+Oq2yWGX65qhFB88oI5/ZIZcyQf/DG8x5I:UXKq2ydK5yr88oI5/Zs/Qfy8xS

    Score
    10/10
    salitybackdoorevasiontrojanupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • Windows security bypass

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks