sality

General

Target

dbfa2a2c64f3ada4405fe4316e8cd6325dd3e84189e6c3bc4a458a0c75040af3
Size

968KB
Sample

241207-d3r8cazlgl
MD5

310df0dbf5db85dd66671bd787da7308
SHA1

dde285802d343f89c0dc862eb9cd3cfa6b474460
SHA256

dbfa2a2c64f3ada4405fe4316e8cd6325dd3e84189e6c3bc4a458a0c75040af3
SHA512

39ff135fbf2b73c0add3f9a94dd3cd4cdce9707749a2b2695312ab7102bfdc13ecd525e1eae6178d6e373a144ba0d7372808ad2e44b46699f44cdffe949448de
SSDEEP

3072:8AK+74WNZZv17Bc9hD+9oS0wnNsEtLOahIObR0vYfoDcTpLU5/QKe24Vd9oEtTHc:8WNZK/wnNs4h/lYcTpe6bT9i

Score

10^/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

- Target
  
  dbfa2a2c64f3ada4405fe4316e8cd6325dd3e84189e6c3bc4a458a0c75040af3
- Size
  
  968KB
- MD5
  
  310df0dbf5db85dd66671bd787da7308
- SHA1
  
  dde285802d343f89c0dc862eb9cd3cfa6b474460
- SHA256
  
  dbfa2a2c64f3ada4405fe4316e8cd6325dd3e84189e6c3bc4a458a0c75040af3
- SHA512
  
  39ff135fbf2b73c0add3f9a94dd3cd4cdce9707749a2b2695312ab7102bfdc13ecd525e1eae6178d6e373a144ba0d7372808ad2e44b46699f44cdffe949448de
- SSDEEP
  
  3072:8AK+74WNZZv17Bc9hD+9oS0wnNsEtLOahIObR0vYfoDcTpLU5/QKe24Vd9oEtTHc:8WNZK/wnNs4h/lYcTpe6bT9i
Score

10^/10

sality backdoor upx discovery
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- Sality family
  sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Sality family

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2