sality

General

Target

80a802f8e3cd2521befa800be720cff7e9d64e2c76028050fb38fd6b5c4d61f9
Size

976KB
Sample

241205-y55xfazqc1
MD5

6cc117a226f9201a0137829038836a98
SHA1

2be5949ef4f7a68871ac89664f362b951005fe4f
SHA256

80a802f8e3cd2521befa800be720cff7e9d64e2c76028050fb38fd6b5c4d61f9
SHA512

1439e19809d30e3558a1931e6238b41cfec621ac877c2e651cb0fb84f3661c4faa61d77ae85aa8ed77214da181ab2589826bc0417b9730418ef205996d5854eb
SSDEEP

12288:L62zeB/vtDBrhOGd9X8WoKvD/g7YRbKMIvsexWDyNjxsHq6ZpwM0SP3+IfRHHhqE:9eZVDBdxLiyF2vfxxb6ZpwM0I+Oh

Score

10^/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

- Target
  
  80a802f8e3cd2521befa800be720cff7e9d64e2c76028050fb38fd6b5c4d61f9
- Size
  
  976KB
- MD5
  
  6cc117a226f9201a0137829038836a98
- SHA1
  
  2be5949ef4f7a68871ac89664f362b951005fe4f
- SHA256
  
  80a802f8e3cd2521befa800be720cff7e9d64e2c76028050fb38fd6b5c4d61f9
- SHA512
  
  1439e19809d30e3558a1931e6238b41cfec621ac877c2e651cb0fb84f3661c4faa61d77ae85aa8ed77214da181ab2589826bc0417b9730418ef205996d5854eb
- SSDEEP
  
  12288:L62zeB/vtDBrhOGd9X8WoKvD/g7YRbKMIvsexWDyNjxsHq6ZpwM0SP3+IfRHHhqE:9eZVDBdxLiyF2vfxxb6ZpwM0I+Oh
Score

10^/10

discovery sality backdoor upx
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- Sality family
  sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Sality family

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2