sality

General

Target

8c70c0b2564e672489586bd98a394626_JaffaCakes118
Size

108KB
Sample

240811-3lq2dsvbmq
MD5

8c70c0b2564e672489586bd98a394626
SHA1

3c9d8ac2266dea6875164147c1b4b162120c906e
SHA256

2510ab06ae7f878d6010f4726ec9b97855cfd0fe18dd41123ef2e3b9ebffbcee
SHA512

55fc9da4e03254d30c4ee62d31759855d6584ff7736f61ba0d75ee0bd5d3f3aec7fb78a560626f2019a8d27aea30e9aa748bababd9a1166f6afe5c20ad279d33
SSDEEP

1536:yKln5IUmDjoX9Spr2ipL2dr51La2yd/J6gDLDQnD8p5k1Bt0pUR+bFM:yKln5I8Spr2i9iza/JlW8p5+jMbFM

Score

10^/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

- Target
  
  8c70c0b2564e672489586bd98a394626_JaffaCakes118
- Size
  
  108KB
- MD5
  
  8c70c0b2564e672489586bd98a394626
- SHA1
  
  3c9d8ac2266dea6875164147c1b4b162120c906e
- SHA256
  
  2510ab06ae7f878d6010f4726ec9b97855cfd0fe18dd41123ef2e3b9ebffbcee
- SHA512
  
  55fc9da4e03254d30c4ee62d31759855d6584ff7736f61ba0d75ee0bd5d3f3aec7fb78a560626f2019a8d27aea30e9aa748bababd9a1166f6afe5c20ad279d33
- SSDEEP
  
  1536:yKln5IUmDjoX9Spr2ipL2dr51La2yd/J6gDLDQnD8p5k1Bt0pUR+bFM:yKln5I8Spr2i9iza/JlW8p5+jMbFM
Score

10^/10

sality backdoor discovery upx
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2