Overview

overview

10

Static

static

3

72e51dd5df...fe.exe

windows7-x64

3

72e51dd5df...fe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72e51dd5dfd89390290274a3eb4e3c2e5acbc8321c7b040b8769af7dd7f4f1fe

  • Size

    3.2MB

  • Sample

    240308-rlpmsahb26

  • MD5

    594da658453b4ecb2fdc74df71f434b5

  • SHA1

    b9633e10c5d4c94f8ac8b0866adb012005deab5e

  • SHA256

    72e51dd5dfd89390290274a3eb4e3c2e5acbc8321c7b040b8769af7dd7f4f1fe

  • SHA512

    f504a8f394bbb049aabf479f462a9c318d0fa9d2efee8d4daf06303c65c33c406f01f3262c48a6caa4802ef2d1e8e3e0ed40f38a1910d8afb66c96e6d878824f

  • SSDEEP

    98304:JqcHd9dChDBdG26666666666666666666666666666666x666666666666666fw8:JqcHZChfGcwM0lq

Score
10/10
salitybackdoorupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      72e51dd5dfd89390290274a3eb4e3c2e5acbc8321c7b040b8769af7dd7f4f1fe

    • Size

      3.2MB

    • MD5

      594da658453b4ecb2fdc74df71f434b5

    • SHA1

      b9633e10c5d4c94f8ac8b0866adb012005deab5e

    • SHA256

      72e51dd5dfd89390290274a3eb4e3c2e5acbc8321c7b040b8769af7dd7f4f1fe

    • SHA512

      f504a8f394bbb049aabf479f462a9c318d0fa9d2efee8d4daf06303c65c33c406f01f3262c48a6caa4802ef2d1e8e3e0ed40f38a1910d8afb66c96e6d878824f

    • SSDEEP

      98304:JqcHd9dChDBdG26666666666666666666666666666666x666666666666666fw8:JqcHZChfGcwM0lq

    Score
    10/10
    salitybackdoorupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks