Overview

overview

10

Static

static

10

NEAS.5f426...40.exe

windows7-x64

10

NEAS.5f426...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.5f4265f4f0e2b1908939ff936b9b6d40.exe

  • Size

    81KB

  • MD5

    5f4265f4f0e2b1908939ff936b9b6d40

  • SHA1

    781905baae66d934c24e1bb35a20b408bd3fc315

  • SHA256

    ef9d7b8f24c21d423186683f5c5184595d852acc32625e7ae2800c8047ee17d9

  • SHA512

    db2d17a105b5362589a8e78cfe1a7057cb2b1cec9033935fecdb058cb472716a759ded7d9e50ed41f817c3e830d8a9ccbc8f6c003d7877981a0ecf1d53714128

  • SSDEEP

    768:oBkfKY4umiPCAcdBrq06iqmNKzshw0xTJYc8VKU0n7OdwmdZfB5AVIf2z3Hin:yU8cO7u2NbvdOc8VKUaOdNdRzMI2rHm

Score
10/10
upxsality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
    sality
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.5f4265f4f0e2b1908939ff936b9b6d40.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections