General

  • Target

    8fc095cc1bdd1a1fadbf17593beb838629fc8f023c099fea17de360fee313011

  • Size

    1.2MB

  • Sample

    240719-gksypsyfkd

  • MD5

    71709094228329a7401c42252f516ecd

  • SHA1

    9f6db04abbc7ee2a06a639702d26ae936f80844f

  • SHA256

    8fc095cc1bdd1a1fadbf17593beb838629fc8f023c099fea17de360fee313011

  • SHA512

    68a1940cc0648bda0ac9a128b13cf7adbf65b5fe28534d388563a3ddb65764ed065ee78ce59ecb96d9943c32bfde3f11348c0ef1e05df2fbb4fd7f896bb9511a

  • SSDEEP

    24576:wR9xLcxwuNcPoZMufrikUpaWd5fLHX0p/BIOcY4PWN4Lvzqwr:022PPujikUpaWdVL0p/PNc7D

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      8fc095cc1bdd1a1fadbf17593beb838629fc8f023c099fea17de360fee313011

    • Size

      1.2MB

    • MD5

      71709094228329a7401c42252f516ecd

    • SHA1

      9f6db04abbc7ee2a06a639702d26ae936f80844f

    • SHA256

      8fc095cc1bdd1a1fadbf17593beb838629fc8f023c099fea17de360fee313011

    • SHA512

      68a1940cc0648bda0ac9a128b13cf7adbf65b5fe28534d388563a3ddb65764ed065ee78ce59ecb96d9943c32bfde3f11348c0ef1e05df2fbb4fd7f896bb9511a

    • SSDEEP

      24576:wR9xLcxwuNcPoZMufrikUpaWd5fLHX0p/BIOcY4PWN4Lvzqwr:022PPujikUpaWdVL0p/PNc7D

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

    • Windows security bypass

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Windows security modification

MITRE ATT&CK Enterprise v15

Tasks