Overview

overview

10

Static

static

3

ec43473a74...70.exe

windows7-x64

10

ec43473a74...70.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec43473a747d2088341a7b9523ef212bfb4f80b669874ff5e5e7cd6056564170

  • Size

    101KB

  • Sample

    231002-w5b81sfd57

  • MD5

    c28741a7b4624256222dd7ac776cac46

  • SHA1

    064bda241f5c586ca96da33d2dcc71bdc5671c7b

  • SHA256

    ec43473a747d2088341a7b9523ef212bfb4f80b669874ff5e5e7cd6056564170

  • SHA512

    c82fc8cdc0df55abe6ac3de915d7bdf6628ffe97dae1791e0d0f5072b9f8d4ece9f1adb707f5dfa7e52177eca4b240f7fd83befae78534e40c8f3f049c12fba3

  • SSDEEP

    3072:x3/xzbQAGiT6QCaQgBAJsJp7WJQUQZ0y9G3:NhbQAGifCbNJJQZ0aC

Score
10/10
salitybackdoorupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      ec43473a747d2088341a7b9523ef212bfb4f80b669874ff5e5e7cd6056564170

    • Size

      101KB

    • MD5

      c28741a7b4624256222dd7ac776cac46

    • SHA1

      064bda241f5c586ca96da33d2dcc71bdc5671c7b

    • SHA256

      ec43473a747d2088341a7b9523ef212bfb4f80b669874ff5e5e7cd6056564170

    • SHA512

      c82fc8cdc0df55abe6ac3de915d7bdf6628ffe97dae1791e0d0f5072b9f8d4ece9f1adb707f5dfa7e52177eca4b240f7fd83befae78534e40c8f3f049c12fba3

    • SSDEEP

      3072:x3/xzbQAGiT6QCaQgBAJsJp7WJQUQZ0y9G3:NhbQAGifCbNJJQZ0aC

    Score
    10/10
    salitybackdoorupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks