General

  • Target

    5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d

  • Size

    808KB

  • Sample

    240218-kftafsgd22

  • MD5

    c85006435a7893fcf600bddbb085a65e

  • SHA1

    c35071652eaf8654ca889136ac5866fd558dfe50

  • SHA256

    5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d

  • SHA512

    7b7fe52cc09e5df959ac36ca8e155235667fa3156529fbe76b56b242b3ce1054a11858596dfb21fea2f3fb2244fcf17982fdce4f4602d300f9ab275093b8e961

  • SSDEEP

    12288:liRIlo9kf6Wtg5OF56k2L4FC3HshSHvGKaraZQi8izSsPKloVTvxzH:6IloYg5O/t2L4FC3GSc9KSoVTvp

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d

    • Size

      808KB

    • MD5

      c85006435a7893fcf600bddbb085a65e

    • SHA1

      c35071652eaf8654ca889136ac5866fd558dfe50

    • SHA256

      5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d

    • SHA512

      7b7fe52cc09e5df959ac36ca8e155235667fa3156529fbe76b56b242b3ce1054a11858596dfb21fea2f3fb2244fcf17982fdce4f4602d300f9ab275093b8e961

    • SSDEEP

      12288:liRIlo9kf6Wtg5OF56k2L4FC3HshSHvGKaraZQi8izSsPKloVTvxzH:6IloYg5O/t2L4FC3GSc9KSoVTvp

    Score
    10/10
    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks