Overview

overview

10

Static

static

10

79fb231e7b...18.exe

windows7-x64

10

79fb231e7b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79fb231e7b41db24e028c3adf8fe14bd_JaffaCakes118

  • Size

    119KB

  • MD5

    79fb231e7b41db24e028c3adf8fe14bd

  • SHA1

    3f71e7a907934f2cad0c0c8918a71d42263ac1e8

  • SHA256

    67e92de963f3f0135148b5ea696046a3c21da446feaab2185644856705ac49b7

  • SHA512

    b5e1d1e75cd8eabf8c5588f32fc96a894d510d8a0cf4f97fbf518e6fb1704d9c7bf57f1bfe4d299c9f9acf47936f50b877c8ddcf995e1c8c74fd4be00a4f1619

  • SSDEEP

    3072:R7HibvPPoCujRaRsUs1gEE29qA/2V4fOBvsMM:NHirLujRaRsU8gEE1A/2V4fOBvs/

Score
10/10
sality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
    sality
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 79fb231e7b41db24e028c3adf8fe14bd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections