sality | ca30d8ed477161e87f81bc80c3f66be28358d3d44f0d62716f55fcde4481ab61 | Triage

Resubmissions

17-05-2024 23:39

240517-3nca1shb6v 10

31-03-2024 18:02

240331-wmf49agc61 10

31-03-2024 17:58

240331-wkbrragc21 10

Sharing

General

Target

ca30d8ed477161e87f81bc80c3f66be28358d3d44f0d62716f55fcde4481ab61
Size

754KB
Sample

240331-wmf49agc61
MD5

f1fdda86a94e2d1abbd244089d73752f
SHA1

70f8defd6b861717142d7db8a1fe2be6a34a5b13
SHA256

ca30d8ed477161e87f81bc80c3f66be28358d3d44f0d62716f55fcde4481ab61
SHA512

6a4fb99c397b55a61be466f52a83dd9fade0e022f5cd3cdb18411069cea6b0f2ae85f980555e62b710955ce1083ed11377c2bcce495f6a6012dd3e2b4325f18c
SSDEEP

6144:VQM3xHba9C4q/HVF7eHpnTHzJEWyLBMRJDL+gpFfD2l9pAZcXXkqD:V3x7a9a8HdPjX+gpFfDO0+XX

Score

10^/10

sality backdoor upx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

- Target
  
  ca30d8ed477161e87f81bc80c3f66be28358d3d44f0d62716f55fcde4481ab61
- Size
  
  754KB
- MD5
  
  f1fdda86a94e2d1abbd244089d73752f
- SHA1
  
  70f8defd6b861717142d7db8a1fe2be6a34a5b13
- SHA256
  
  ca30d8ed477161e87f81bc80c3f66be28358d3d44f0d62716f55fcde4481ab61
- SHA512
  
  6a4fb99c397b55a61be466f52a83dd9fade0e022f5cd3cdb18411069cea6b0f2ae85f980555e62b710955ce1083ed11377c2bcce495f6a6012dd3e2b4325f18c
- SSDEEP
  
  6144:VQM3xHba9C4q/HVF7eHpnTHzJEWyLBMRJDL+gpFfD2l9pAZcXXkqD:V3x7a9a8HdPjX+gpFfDO0+XX
Score

10^/10

sality backdoor upx
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

salitybackdoorupx