Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

8fa380e570...eb.exe

windows7-x64

10

8fa380e570...eb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8fa380e570917467e10e6ffc09d9e5cbc72f63414cc2f140adfd4319676b60eb

  • Size

    639KB

  • Sample

    230822-v9bydaff3y

  • MD5

    80830e1059e2c18903f08ee351c6d4fe

  • SHA1

    eba9633a898a56495a2ba2556755ef2ab969e48c

  • SHA256

    8fa380e570917467e10e6ffc09d9e5cbc72f63414cc2f140adfd4319676b60eb

  • SHA512

    c28a26b503432716e1a4e81803fca9ded2f30cfc75ea0078bb352e3ad6839ca84fbc35e691606914f7df714fec29c85c93d90860a2d5e84536e0eed6897187a0

  • SSDEEP

    12288:fKKY+pSW6rcCXnXFwQk7nkeHo6uIIAIo/c888888888888W88888888888bqXpR:Cu56oCXnXFwQk7nbHo6uIIroMUn

Score
10/10
salitybackdoorupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      8fa380e570917467e10e6ffc09d9e5cbc72f63414cc2f140adfd4319676b60eb

    • Size

      639KB

    • MD5

      80830e1059e2c18903f08ee351c6d4fe

    • SHA1

      eba9633a898a56495a2ba2556755ef2ab969e48c

    • SHA256

      8fa380e570917467e10e6ffc09d9e5cbc72f63414cc2f140adfd4319676b60eb

    • SHA512

      c28a26b503432716e1a4e81803fca9ded2f30cfc75ea0078bb352e3ad6839ca84fbc35e691606914f7df714fec29c85c93d90860a2d5e84536e0eed6897187a0

    • SSDEEP

      12288:fKKY+pSW6rcCXnXFwQk7nkeHo6uIIAIo/c888888888888W88888888888bqXpR:Cu56oCXnXFwQk7nbHo6uIIroMUn

    Score
    10/10
    salitybackdoorupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks