Overview

overview

10

Static

static

10

NEAS.5f696...JC.exe

windows7-x64

10

NEAS.5f696...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.5f69606c5c9dc9cb572e09e8e46bd740_JC.exe

  • Size

    54KB

  • MD5

    5f69606c5c9dc9cb572e09e8e46bd740

  • SHA1

    1380f9bdcdfa724428405ae237ca4b9a8c522272

  • SHA256

    0932a8b1c6f421c3be09034cf46edace769ae29fc5d83a35fe55c44a9fea9f63

  • SHA512

    e19100f045a1d506ff8f6ca2456d33004400072d0e95f865b36616b63100df5e6dac5a051012c34261df214ebcac347db2b11be641f7b66fc6a10a995ac16a34

  • SSDEEP

    768:oBkfKY4umiPCAcdBrq06iqmNKzshw0xTJYc8VKU0n7OdwmdZfB5AV:yU8cO7u2NbvdOc8VKUaOdNdRzM

Score
10/10
upxsality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
    sality
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.5f69606c5c9dc9cb572e09e8e46bd740_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections