sality | 50d803405e13a8749bbbc53185cc4e3d104ab2dd1d85e3c4c375a95697908ba1 | Triage™

Login
Reports

Overview

overview

Static

static

1

36317e75e7...69.exe

windows7-x64

36317e75e7...69.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
36317e75e7e6b397e3601a6f57d47869.exe
Size 464KB
Sample230322-tcsdeshg52
SHA256 50d803405e13a8749bbbc53185cc4e3d104ab2dd1d85e3c4c375a95697908ba1
MD5 36317e75e7e6b397e3601a6f57d47869
SHA1 ef352460956ae1daddedd9bb5cc6a3e82eaa9f84
SHA512 7bd056386173e1ff4a6cf8b903b6578a76dc074da8175f43c8ba80c3b625cfb2d7968d8e8278cef34c17d4cf64af45538d84e059272de363044b6bfc8c8456b3
SSDEEP 6144:bU8mdthp2dsUmpiBXCAbiklSV1vGw5dTB6HQo4+HqEV2XlicY26C1:ep2OMCAmDVUw5d4nqEc20
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sality backdoor evasion trojan upx

Static task

static1

Behavioral task

behavioral1

Sample

36317e75e7e6b397e3601a6f57d47869.exe

Resource

win7-20230220-en

windows7-x64

12 signatures

150 seconds

sality backdoor evasion trojan upx

Behavioral task

behavioral2

Sample

36317e75e7e6b397e3601a6f57d47869.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

150 seconds

sality backdoor upx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/

Targets

- Target
  36317e75e7e6b397e3601a6f57d47869.exe
- Size 464KB
- SHA256 50d803405e13a8749bbbc53185cc4e3d104ab2dd1d85e3c4c375a95697908ba1
- MD5 36317e75e7e6b397e3601a6f57d47869
- SHA1 ef352460956ae1daddedd9bb5cc6a3e82eaa9f84
- SHA512 7bd056386173e1ff4a6cf8b903b6578a76dc074da8175f43c8ba80c3b625cfb2d7968d8e8278cef34c17d4cf64af45538d84e059272de363044b6bfc8c8456b3
- SSDEEP 6144:bU8mdthp2dsUmpiBXCAbiklSV1vGw5dTB6HQo4+HqEV2XlicY26C1:ep2OMCAmDVUw5d4nqEc20
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

sality backdoor evasion trojan upx
- Modifies firewall policy service
  evasion
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

salitybackdoorevasiontrojanupx

behavioral2

salitybackdoorupx

© 2018-2026

Terms | Privacy