sality

General

Target

ef34d04d9c9f495665882bf2a42f90d7_JaffaCakes118
Size

132KB
Sample

240921-gw1gxsyard
MD5

ef34d04d9c9f495665882bf2a42f90d7
SHA1

bcc7aa8b72d1da72503da3c5262cea2b9fb1cff9
SHA256

6511d3cdf01b36d1b0286296ee6bed56e4257a9e5d47026097a9f9a1af6f6ce3
SHA512

38b0220f36b201be1f6028546dbfce5ab85e086a90570538499db9f5290db0836bf2415a57bbd79e689ca85dfed1252b5c7f4358e2651c828fd7e40beb819922
SSDEEP

3072:dNajLNKvomMqIDhTbbxa0byUgsFrecodPXn:utqxKBY09gsFIf

Score

10^/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

- Target
  
  ef34d04d9c9f495665882bf2a42f90d7_JaffaCakes118
- Size
  
  132KB
- MD5
  
  ef34d04d9c9f495665882bf2a42f90d7
- SHA1
  
  bcc7aa8b72d1da72503da3c5262cea2b9fb1cff9
- SHA256
  
  6511d3cdf01b36d1b0286296ee6bed56e4257a9e5d47026097a9f9a1af6f6ce3
- SHA512
  
  38b0220f36b201be1f6028546dbfce5ab85e086a90570538499db9f5290db0836bf2415a57bbd79e689ca85dfed1252b5c7f4358e2651c828fd7e40beb819922
- SSDEEP
  
  3072:dNajLNKvomMqIDhTbbxa0byUgsFrecodPXn:utqxKBY09gsFIf
Score

10^/10

sality backdoor discovery upx
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2