General

  • Target

    3ae418853dbfcda29bba7fbb6b5ef6ee2a8e9da729771d35d00be307ec0a1b4b.exe

  • Size

    1.3MB

  • Sample

    241122-jz5bdssrep

  • MD5

    bdd376c41d5d9607c734323de1673875

  • SHA1

    954a5bfbfbd798631e9a450f3319e790b4f532b1

  • SHA256

    3ae418853dbfcda29bba7fbb6b5ef6ee2a8e9da729771d35d00be307ec0a1b4b

  • SHA512

    af80221385148553d5cde95179936953488b2924a2f152105e0e0afcf6c1121c9868cc512bc980f4374a058815c0e66df0902962cdcceae3fb680bde1de0853a

  • SSDEEP

    1536:FWhqV88AlvXKy1ECTfPupHXz9K7/IeNwdFKc6Pp9jBsB6MA7Exu7z1SNm8h4XFZC:EAQx1EDpHxK7wBdQc6RvPxVgNmXFKJUQ

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      3ae418853dbfcda29bba7fbb6b5ef6ee2a8e9da729771d35d00be307ec0a1b4b.exe

    • Size

      1.3MB

    • MD5

      bdd376c41d5d9607c734323de1673875

    • SHA1

      954a5bfbfbd798631e9a450f3319e790b4f532b1

    • SHA256

      3ae418853dbfcda29bba7fbb6b5ef6ee2a8e9da729771d35d00be307ec0a1b4b

    • SHA512

      af80221385148553d5cde95179936953488b2924a2f152105e0e0afcf6c1121c9868cc512bc980f4374a058815c0e66df0902962cdcceae3fb680bde1de0853a

    • SSDEEP

      1536:FWhqV88AlvXKy1ECTfPupHXz9K7/IeNwdFKc6Pp9jBsB6MA7Exu7z1SNm8h4XFZC:EAQx1EDpHxK7wBdQc6RvPxVgNmXFKJUQ

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

    • Sality family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks