Overview

overview

10

Static

static

3

582699f715...84.exe

windows7-x64

3

582699f715...84.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    582699f715ff7804be341ed033faecb100b981a879045ffb5d83c057b7f2f684

  • Size

    4.0MB

  • Sample

    240609-f7m6aseb91

  • MD5

    34b9baf248904f275ca16be653b23db7

  • SHA1

    08ae6a316aee1d5e3ace025ce1a6d6e5c224e8ff

  • SHA256

    582699f715ff7804be341ed033faecb100b981a879045ffb5d83c057b7f2f684

  • SHA512

    eafb834d87df267358a6c16eebe69060925a833a6b705b4dab86d37dd6f4f61bbc296b90f0d97836960dfa52fb804f987bd813e2b4dbea1faef8b67bd317eb04

  • SSDEEP

    98304:n6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwww0:vumyGL1Ur1K3GUmgAf7

Score
10/10
salitybackdoorupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      582699f715ff7804be341ed033faecb100b981a879045ffb5d83c057b7f2f684

    • Size

      4.0MB

    • MD5

      34b9baf248904f275ca16be653b23db7

    • SHA1

      08ae6a316aee1d5e3ace025ce1a6d6e5c224e8ff

    • SHA256

      582699f715ff7804be341ed033faecb100b981a879045ffb5d83c057b7f2f684

    • SHA512

      eafb834d87df267358a6c16eebe69060925a833a6b705b4dab86d37dd6f4f61bbc296b90f0d97836960dfa52fb804f987bd813e2b4dbea1faef8b67bd317eb04

    • SSDEEP

      98304:n6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwww0:vumyGL1Ur1K3GUmgAf7

    Score
    10/10
    salitybackdoorupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks