Analysis
-
max time kernel
117s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
13/10/2023, 21:41
General
-
Target
f203d983b8654bbe608d3d00e8aa5f1073588694b87429aaa4ffae3ceaa14a24.exe
-
Size
273KB
-
MD5
bf2511ecc4e355493d4ec4767aca3ce2
-
SHA1
25e56788838f7383cd35d8c065808d0fcdfe5f8a
-
SHA256
f203d983b8654bbe608d3d00e8aa5f1073588694b87429aaa4ffae3ceaa14a24
-
SHA512
d21ab2b1af02d26d361cc3620615ed72ec3214a51abe2d988e8063cf3dc31c2b5ca5f7fc0cf55f4d2f87d3f4972058e4bed2d381a846426fd9679cf4c05624d0
-
SSDEEP
6144:5Aol/DRfkTC3dM7B+2Cew8ApDEe22d3PpMb2:5AolbRfky6B+2CeMpDsGhB
Score
10/10
Malware Config
Signatures
-
Sality
Sality is backdoor written in C++, first discovered in 2003.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f203d983b8654bbe608d3d00e8aa5f1073588694b87429aaa4ffae3ceaa14a24.exe"C:\Users\Admin\AppData\Local\Temp\f203d983b8654bbe608d3d00e8aa5f1073588694b87429aaa4ffae3ceaa14a24.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
284KB
-
Filesize
284KB
-
Filesize
16.7MB
-
Filesize
16.7MB