sality

General

Target

83e20940f43f65eb776ebdf014a8f700N.exe
Size

104KB
Sample

240902-a3qgzaxeke
MD5

83e20940f43f65eb776ebdf014a8f700
SHA1

d161d8af44f90756ed816808a105f01624e1e3da
SHA256

e64612fd50fd23ace3d6da35d2097fbedf36c356a7d0fcccd5fae1c25802a2b5
SHA512

8654d89c2409b52bed60cc218a83d41d97651626be1783c231e009f6632ca9d73be86987b49328aef4578c166e5d3a8b21cf99fb8b60c5d369093d23aee26e86
SSDEEP

3072:1SDADeak7dJHB/AY3axzfkVGGJp0NyONQcaYLw:1SsQLH5ArVAGGJZOycal

Score

10^/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

- Target
  
  83e20940f43f65eb776ebdf014a8f700N.exe
- Size
  
  104KB
- MD5
  
  83e20940f43f65eb776ebdf014a8f700
- SHA1
  
  d161d8af44f90756ed816808a105f01624e1e3da
- SHA256
  
  e64612fd50fd23ace3d6da35d2097fbedf36c356a7d0fcccd5fae1c25802a2b5
- SHA512
  
  8654d89c2409b52bed60cc218a83d41d97651626be1783c231e009f6632ca9d73be86987b49328aef4578c166e5d3a8b21cf99fb8b60c5d369093d23aee26e86
- SSDEEP
  
  3072:1SDADeak7dJHB/AY3axzfkVGGJp0NyONQcaYLw:1SsQLH5ArVAGGJZOycal
Score

10^/10

sality backdoor upx discovery
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2