General
-
Target
8465368895aae5f39fd68117d05891210d733d6ce98c93418c2839948aa2d468
-
Size
2.2MB
-
Sample
240518-qj69dadc3s
-
MD5
b35dec6d096992a1d7bf7fc3f12a8806
-
SHA1
ecdbe081485fc72e57241e842890d96936397627
-
SHA256
8465368895aae5f39fd68117d05891210d733d6ce98c93418c2839948aa2d468
-
SHA512
b459c222547f61ea7b40b338e57c57df5557a9520a62206805684f95cebbf82336b925faae99e88a4b1b0ce5308cbd52ccfce5d7bc1ed4e88010a5d597b258f0
-
SSDEEP
49152:nA9DTQ11ffNv4QFNy99tzeQJMazTUTFZCbm3Mc7NrgOPnSk6dI3FRC:nJXfVv4QPyBiQRHKx7NrgP
Static task
static1
Behavioral task
behavioral1
Sample
8465368895aae5f39fd68117d05891210d733d6ce98c93418c2839948aa2d468.exe
Resource
win7-20240508-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
8465368895aae5f39fd68117d05891210d733d6ce98c93418c2839948aa2d468
-
Size
2.2MB
-
MD5
b35dec6d096992a1d7bf7fc3f12a8806
-
SHA1
ecdbe081485fc72e57241e842890d96936397627
-
SHA256
8465368895aae5f39fd68117d05891210d733d6ce98c93418c2839948aa2d468
-
SHA512
b459c222547f61ea7b40b338e57c57df5557a9520a62206805684f95cebbf82336b925faae99e88a4b1b0ce5308cbd52ccfce5d7bc1ed4e88010a5d597b258f0
-
SSDEEP
49152:nA9DTQ11ffNv4QFNy99tzeQJMazTUTFZCbm3Mc7NrgOPnSk6dI3FRC:nJXfVv4QPyBiQRHKx7NrgP
-
Modifies firewall policy service
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1