sality | 7e2f3163437db620d84d7eadc6111bdd396ab491f1a5048fd4e0e3a96bd2609d

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05/12/2024, 14:15

Target

7e2f3163437db620d84d7eadc6111bdd396ab491f1a5048fd4e0e3a96bd2609d.exe
Size

117KB
MD5

f0bb98d148b80b19ca2db9731ca6c431
SHA1

a2bdedd54618112f91a860591c67f75be6b08576
SHA256

7e2f3163437db620d84d7eadc6111bdd396ab491f1a5048fd4e0e3a96bd2609d
SHA512

d7d66c05b78599fc1772a06540809c409d1e07758e46d33031619334a78bab87111edc8d54c47d2490013ff334d9f0c710ed197cc0a27e11ad790e71a473fc84
SSDEEP

1536:5y909jkQxpgOnTCzaa9iYlCyphkP7W2+xTpt+Lms8rBoKq7EwCwp+1+x:5b9jkkppTCzx0YlCyoS+X8rl+EwHv

Score

10^/10

sality backdoor upx

Family

sality

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Sality
Sality is backdoor written in C++, first discovered in 2003.
backdoor sality
Sality family
sality

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2704-4-0x0000000003430000-0x00000000044EA000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\7e2f3163437db620d84d7eadc6111bdd396ab491f1a5048fd4e0e3a96bd2609d.exe
"C:\Users\Admin\AppData\Local\Temp\7e2f3163437db620d84d7eadc6111bdd396ab491f1a5048fd4e0e3a96bd2609d.exe"
1⤵
PID:2704

memory/2704-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2704-4-0x0000000003430000-0x00000000044EA000-memory.dmp

Filesize
16.7MB

Download
memory/2704-3-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/2704-5-0x0000000003430000-0x00000000044EA000-memory.dmp

Filesize
16.7MB

Download