Overview

overview

10

Static

static

10

006907199.exe

windows7-x64

10

006907199.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    006907199.exe

  • Size

    16.6MB

  • MD5

    2dba832a5dd60f49e3f39083dc446ebf

  • SHA1

    0fe0f4b9a2666e800a486ca918dff8b2e71d516e

  • SHA256

    040f8a9fbdc49c0ae2c2e3872f1fabd8ed805bb8e0baaefd6e426d5facd2a173

  • SHA512

    aa89ac585c1dec26bef1c5c5cab6cb24f452b2ba55113d875ba231b1d3d7ec08e2ae794a3d2449db0a39d561c6a2360089d1449cc82ca11559aacaec7d54bd7a

  • SSDEEP

    6144:NHirLujRaRsU8gEE1A/2V4fOBvs/eU5UH0t:NHiujRaqgEjXeik0t

Score
10/10
sality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
    sality
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 006907199.exe
    .exe windows x86


    Headers

    Sections