General

  • Target

    af80a65b6e16053797a1ab9ee6f6ed80

  • Size

    296KB

  • Sample

    240229-z8pkasdd56

  • MD5

    af80a65b6e16053797a1ab9ee6f6ed80

  • SHA1

    41c5e7a98b29040f32f93a8a9924ee03b923bf27

  • SHA256

    8e838b836805587e20d38b355f65193c20a0017b76ec7db0f75db23650646d54

  • SHA512

    4dfcbbf270a8357bce321425db2a4730609b470b0718622ea2a3526f3fa660d1ad0bee218bb0010647404e7f8d7f3a1b843ac7e5145e0af14bbd17abf5bf4308

  • SSDEEP

    6144:oE/La9PPO1H5ZVUb8MYbAlT6323757p7FYcL5:JLaN21CZWAAQdNFYcL5

Score
10/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      af80a65b6e16053797a1ab9ee6f6ed80

    • Size

      296KB

    • MD5

      af80a65b6e16053797a1ab9ee6f6ed80

    • SHA1

      41c5e7a98b29040f32f93a8a9924ee03b923bf27

    • SHA256

      8e838b836805587e20d38b355f65193c20a0017b76ec7db0f75db23650646d54

    • SHA512

      4dfcbbf270a8357bce321425db2a4730609b470b0718622ea2a3526f3fa660d1ad0bee218bb0010647404e7f8d7f3a1b843ac7e5145e0af14bbd17abf5bf4308

    • SSDEEP

      6144:oE/La9PPO1H5ZVUb8MYbAlT6323757p7FYcL5:JLaN21CZWAAQdNFYcL5

    Score
    10/10
    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks