General
-
Target
cda3526e1d9d0ee36fb2577748981f4ae70b7c616f57366db7a0095679b585cb
-
Size
116KB
-
Sample
240330-q9zbfsgf27
-
MD5
07e0ba515d9a64c153b3d4fd4840f469
-
SHA1
11c385ad4ab9f2f40d67819ad39a7515ac97616b
-
SHA256
cda3526e1d9d0ee36fb2577748981f4ae70b7c616f57366db7a0095679b585cb
-
SHA512
c3fbee73ec029ed7504c5486b82e16b434ce71ff546389d2c38643ae65fa2ffca6f736dd16dc17d398e9bd19c779d4e3dbbe20d3b15e39ab97fcc932459df638
-
SSDEEP
1536:QFh3SVcQoksEIpFRZnIMVubRa+B4jf2dkGHoGCLPRe6T8Tc1wyPxzV:sdCHGpXZnIMVubY0btCLPReU8T4wyP9V
Static task
static1
Behavioral task
behavioral1
Sample
cda3526e1d9d0ee36fb2577748981f4ae70b7c616f57366db7a0095679b585cb.exe
Resource
win7-20240221-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
cda3526e1d9d0ee36fb2577748981f4ae70b7c616f57366db7a0095679b585cb
-
Size
116KB
-
MD5
07e0ba515d9a64c153b3d4fd4840f469
-
SHA1
11c385ad4ab9f2f40d67819ad39a7515ac97616b
-
SHA256
cda3526e1d9d0ee36fb2577748981f4ae70b7c616f57366db7a0095679b585cb
-
SHA512
c3fbee73ec029ed7504c5486b82e16b434ce71ff546389d2c38643ae65fa2ffca6f736dd16dc17d398e9bd19c779d4e3dbbe20d3b15e39ab97fcc932459df638
-
SSDEEP
1536:QFh3SVcQoksEIpFRZnIMVubRa+B4jf2dkGHoGCLPRe6T8Tc1wyPxzV:sdCHGpXZnIMVubY0btCLPReU8T4wyP9V
-
Modifies firewall policy service
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1