sality

General

Target

28bff17fe2b9a2caada1ae404f44de9e30e6fecd6a00d5f7ed5b90353f6812a7
Size

2.9MB
Sample

240919-h1wj7swgmd
MD5

23902da607356ebc37f160ff1a518dfe
SHA1

69ca31a6e67342bc73a8a6dd8dbcdb6b59bc8e6a
SHA256

28bff17fe2b9a2caada1ae404f44de9e30e6fecd6a00d5f7ed5b90353f6812a7
SHA512

405a9e5ca1d1c30d3876cfe5f29995ff26ed381a91bf67b2a381aa415c839f492b7a2630e6b13d3fe77243a95a094040a9199c56821605daef83d3240e554ee0
SSDEEP

49152:t9HKPpJqQSr+Vq4YBJUQU/mW4Um74FXViIB4jo81ZmIx8t+yYPkEy7CeTBTDTHah:t9HyH3S2QcB4GoEAyMed

Score

10^/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

- Target
  
  28bff17fe2b9a2caada1ae404f44de9e30e6fecd6a00d5f7ed5b90353f6812a7
- Size
  
  2.9MB
- MD5
  
  23902da607356ebc37f160ff1a518dfe
- SHA1
  
  69ca31a6e67342bc73a8a6dd8dbcdb6b59bc8e6a
- SHA256
  
  28bff17fe2b9a2caada1ae404f44de9e30e6fecd6a00d5f7ed5b90353f6812a7
- SHA512
  
  405a9e5ca1d1c30d3876cfe5f29995ff26ed381a91bf67b2a381aa415c839f492b7a2630e6b13d3fe77243a95a094040a9199c56821605daef83d3240e554ee0
- SSDEEP
  
  49152:t9HKPpJqQSr+Vq4YBJUQU/mW4Um74FXViIB4jo81ZmIx8t+yYPkEy7CeTBTDTHah:t9HyH3S2QcB4GoEAyMed
Score

10^/10

sality backdoor discovery upx
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2