sality

General

Target

2a9163f5f55f1235b139fc37c8349d4fc5e831535cc47600bcceb83e49ec93b8
Size

3.0MB
Sample

241205-y22qlszpay
MD5

c14a671bd9c23dc112e22a865dff7165
SHA1

30ef6834f8302ca1584ae1a705b0720830e0c696
SHA256

2a9163f5f55f1235b139fc37c8349d4fc5e831535cc47600bcceb83e49ec93b8
SHA512

ee5745f02a5bc49b808e28057cf6f4d8df8f42a65eb3acbd2b564c3337f3ea13e132ca000b7e4f75d7697a6beffaee80d05387778a33fb8047543fdd280525a8
SSDEEP

49152:2vXBAXLGcpCKf/EuL0Fuc4WUX6x0Tb8/K/NtPhAUq2XwEywA2:2vXBsGpKU20FMWs6x0TbEcNPA8A2

Score

10^/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

- Target
  
  2a9163f5f55f1235b139fc37c8349d4fc5e831535cc47600bcceb83e49ec93b8
- Size
  
  3.0MB
- MD5
  
  c14a671bd9c23dc112e22a865dff7165
- SHA1
  
  30ef6834f8302ca1584ae1a705b0720830e0c696
- SHA256
  
  2a9163f5f55f1235b139fc37c8349d4fc5e831535cc47600bcceb83e49ec93b8
- SHA512
  
  ee5745f02a5bc49b808e28057cf6f4d8df8f42a65eb3acbd2b564c3337f3ea13e132ca000b7e4f75d7697a6beffaee80d05387778a33fb8047543fdd280525a8
- SSDEEP
  
  49152:2vXBAXLGcpCKf/EuL0Fuc4WUX6x0Tb8/K/NtPhAUq2XwEywA2:2vXBsGpKU20FMWs6x0TbEcNPA8A2
Score

10^/10

sality backdoor discovery upx
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- Sality family
  sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Sality family

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2