General

  • Target

    e7c2a61eb6eeb89d6c3b2187ba77360a6e8ff73647838c2e07cf492469e698daN.exe

  • Size

    136KB

  • Sample

    241208-e7xt3axrfl

  • MD5

    c6d8dbc70fa354e419285d8e12f5a470

  • SHA1

    74ba49ad6e2097b780324701aa517598bb7608f5

  • SHA256

    e7c2a61eb6eeb89d6c3b2187ba77360a6e8ff73647838c2e07cf492469e698da

  • SHA512

    0eadcb1e290538fe5dda4349d370e00db6381fcf7b8e1182b0896bdf2cf2372a254afd6306b04d00f09ec7bfa856fb2b02b849657880d17d0a0a6db3edcbafbf

  • SSDEEP

    1536:7/9chxGX3H2Axg6cpMJjWQox9vyXOc/+4fQGaWcL1HOE0UVesk4WFYbGdYDXm7mM:z9qGX3H2iJVo/qXX9YGal4aVdA0u+2H

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

    • Target

      e7c2a61eb6eeb89d6c3b2187ba77360a6e8ff73647838c2e07cf492469e698daN.exe

    • Size

      136KB

    • MD5

      c6d8dbc70fa354e419285d8e12f5a470

    • SHA1

      74ba49ad6e2097b780324701aa517598bb7608f5

    • SHA256

      e7c2a61eb6eeb89d6c3b2187ba77360a6e8ff73647838c2e07cf492469e698da

    • SHA512

      0eadcb1e290538fe5dda4349d370e00db6381fcf7b8e1182b0896bdf2cf2372a254afd6306b04d00f09ec7bfa856fb2b02b849657880d17d0a0a6db3edcbafbf

    • SSDEEP

      1536:7/9chxGX3H2Axg6cpMJjWQox9vyXOc/+4fQGaWcL1HOE0UVesk4WFYbGdYDXm7mM:z9qGX3H2iJVo/qXX9YGal4aVdA0u+2H

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

    • Sality family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks