Overview

overview

10

Static

static

10

NEAS.3a73a...c0.exe

windows7-x64

10

NEAS.3a73a...c0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.3a73aa85ea0c0096726395c5883e6dc0.exe

  • Size

    62KB

  • MD5

    3a73aa85ea0c0096726395c5883e6dc0

  • SHA1

    f404c7b033c567ce5790aa54cd47cde6fb0b860c

  • SHA256

    f4b71f4a45400bcecdb9fe4fc258e1b936f1b1aa5deffa00d0b2b48c1acf7eeb

  • SHA512

    b39a014121e9410b4e16145a7358042f721d298c39038fbf73e9813ed27e2153d56b9ed75d30c7ee43654165b727231c1ca48cf93c3e2518a10dcd336141d031

  • SSDEEP

    768:9L08ueh7Rc3C/jEB5dhF2BcJJgDfZLDcDTOaLG9tq7gFh7jKAn2Z5I/bQuAYpF:7ZRc3/dh4cJJQfZPcDK9h72AiayiF

Score
10/10
upxsality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Signatures

  • Sality family
    sality
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.3a73aa85ea0c0096726395c5883e6dc0.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections