sality

General

Target

d0305ccdc35b1e377209af5f153ecde7_JaffaCakes118
Size

142KB
Sample

241207-cpx11azqcw
MD5

d0305ccdc35b1e377209af5f153ecde7
SHA1

2688f2d5264346ff9fe43a92a766d4ea9e708660
SHA256

8dec43f174c34238bd38d28febea66bf6341f83b7844b5c8de82bf2a56b5a8bd
SHA512

ddd5577c61139def17e98bb48a0f1e2fb65cb1e3fb5d5dd8b67310b16c8e14176032c7a35cd5463195441fe9e05ba7a1e7812f7ddb05c091166b8efb79653fbe
SSDEEP

3072:Wiv8RkjtJjqcWsCIIIwighjeVpAOSGLii0FJtRni:Wi0R4baIIIwf+Lii0FJ3i

Score

10^/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

- Target
  
  d0305ccdc35b1e377209af5f153ecde7_JaffaCakes118
- Size
  
  142KB
- MD5
  
  d0305ccdc35b1e377209af5f153ecde7
- SHA1
  
  2688f2d5264346ff9fe43a92a766d4ea9e708660
- SHA256
  
  8dec43f174c34238bd38d28febea66bf6341f83b7844b5c8de82bf2a56b5a8bd
- SHA512
  
  ddd5577c61139def17e98bb48a0f1e2fb65cb1e3fb5d5dd8b67310b16c8e14176032c7a35cd5463195441fe9e05ba7a1e7812f7ddb05c091166b8efb79653fbe
- SSDEEP
  
  3072:Wiv8RkjtJjqcWsCIIIwighjeVpAOSGLii0FJtRni:Wi0R4baIIIwf+Lii0FJ3i
Score

10^/10

sality backdoor discovery upx
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- Sality family
  sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Sality family

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2