Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.251d1...40.exe

windows7-x64

10

NEAS.251d1...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.251d1b75203ea34e2f63e980d99aeb40.exe

  • Size

    165KB

  • Sample

    231028-wnt3hafh37

  • MD5

    251d1b75203ea34e2f63e980d99aeb40

  • SHA1

    3fea065779dbe1289b936a338efa3fe55d01494b

  • SHA256

    47b3496333c595e4bfa5a1240f403b58178069e8465a6a4f79e0f015cf330578

  • SHA512

    4bd9786b179c9ae1c606e7866fc9474759b4669de52511fb3f830ce7da7ae93a134cc2e77c03674f32a8cb94ae9bc54b1c35365eec4f6c351b9e99cec3ee016f

  • SSDEEP

    3072:/jCKMPKZ293YOb9tfVCRd2hl6EtNfMezu06C6QgSH06WLl+EzjB:/jC7PKwpYObj8H2OEfVtdZHkl/B

Score
10/10
salitybackdoorupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      NEAS.251d1b75203ea34e2f63e980d99aeb40.exe

    • Size

      165KB

    • MD5

      251d1b75203ea34e2f63e980d99aeb40

    • SHA1

      3fea065779dbe1289b936a338efa3fe55d01494b

    • SHA256

      47b3496333c595e4bfa5a1240f403b58178069e8465a6a4f79e0f015cf330578

    • SHA512

      4bd9786b179c9ae1c606e7866fc9474759b4669de52511fb3f830ce7da7ae93a134cc2e77c03674f32a8cb94ae9bc54b1c35365eec4f6c351b9e99cec3ee016f

    • SSDEEP

      3072:/jCKMPKZ293YOb9tfVCRd2hl6EtNfMezu06C6QgSH06WLl+EzjB:/jC7PKwpYObj8H2OEfVtdZHkl/B

    Score
    10/10
    salitybackdoorupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks