sality | e7c2a61eb6eeb89d6c3b2187ba77360a6e8ff73647838c2e07cf492469e698da

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
08-12-2024 04:35

Target

e7c2a61eb6eeb89d6c3b2187ba77360a6e8ff73647838c2e07cf492469e698daN.exe
Size

136KB
MD5

c6d8dbc70fa354e419285d8e12f5a470
SHA1

74ba49ad6e2097b780324701aa517598bb7608f5
SHA256

e7c2a61eb6eeb89d6c3b2187ba77360a6e8ff73647838c2e07cf492469e698da
SHA512

0eadcb1e290538fe5dda4349d370e00db6381fcf7b8e1182b0896bdf2cf2372a254afd6306b04d00f09ec7bfa856fb2b02b849657880d17d0a0a6db3edcbafbf
SSDEEP

1536:7/9chxGX3H2Axg6cpMJjWQox9vyXOc/+4fQGaWcL1HOE0UVesk4WFYbGdYDXm7mM:z9qGX3H2iJVo/qXX9YGal4aVdA0u+2H

Score

10^/10

sality backdoor upx

Family

sality

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Sality
Sality is backdoor written in C++, first discovered in 2003.
backdoor sality
Sality family
sality

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2224-1-0x0000000000670000-0x00000000016FE000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\e7c2a61eb6eeb89d6c3b2187ba77360a6e8ff73647838c2e07cf492469e698daN.exe
"C:\Users\Admin\AppData\Local\Temp\e7c2a61eb6eeb89d6c3b2187ba77360a6e8ff73647838c2e07cf492469e698daN.exe"
1⤵
PID:2224

memory/2224-0-0x0000000000400000-0x0000000000422000-memory.dmp

Filesize
136KB

Download
memory/2224-2-0x0000000000400000-0x0000000000422000-memory.dmp

Filesize
136KB

Download
memory/2224-1-0x0000000000670000-0x00000000016FE000-memory.dmp

Filesize
16.6MB

Download
memory/2224-3-0x0000000000670000-0x00000000016FE000-memory.dmp

Filesize
16.6MB

Download