Overview

overview

10

Static

static

10

f60c7f7cfa...18.exe

windows7-x64

10

f60c7f7cfa...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f60c7f7cfab960013e167a58e2c00518_JaffaCakes118

  • Size

    235KB

  • MD5

    f60c7f7cfab960013e167a58e2c00518

  • SHA1

    3b422b19c1da04b567487235f209cd8d0b6620aa

  • SHA256

    91deaa2b80ec457b7723de4456da6b23ff2bf388568c88083ab293b11308c766

  • SHA512

    593350fba840c69638dc9991e540ca7a2de6478fee7f236812e6750851551073ab2076cc502615d88fdd367124eee60917f64fc41ad5ed1e8ae51451e1e3b37c

  • SSDEEP

    6144:NHirLujRaRsU8gEE1A/2V4fOBvs/B0xxE:NHiujRaqgEjXb

Score
10/10
sality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
    sality
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f60c7f7cfab960013e167a58e2c00518_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections