sality

General

Target

64da781bb2c0458d8f612987301c59eb549fbcbe077c5c343a4ec191f0c51d5a
Size

883KB
Sample

241210-g4q88a1nbj
MD5

7545ce4a82c43586d5952df3d50fec95
SHA1

de590f5e565a915c1413e0278468ec45409a4e97
SHA256

64da781bb2c0458d8f612987301c59eb549fbcbe077c5c343a4ec191f0c51d5a
SHA512

e749dc66f52f616d82a23234b23821d9d64afbd4f64efdbfe80f723c8c58f447f3331961945d17a6939a969dd97e7e808322ba4c31917142ed0bf20ab1cb3f0d
SSDEEP

24576:GryVSoni8KgsSJ9S3giqGgHpv5meFZrEH7Q:konRuSJo3gAgHpRmed

Score

10^/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

- Target
  
  64da781bb2c0458d8f612987301c59eb549fbcbe077c5c343a4ec191f0c51d5a
- Size
  
  883KB
- MD5
  
  7545ce4a82c43586d5952df3d50fec95
- SHA1
  
  de590f5e565a915c1413e0278468ec45409a4e97
- SHA256
  
  64da781bb2c0458d8f612987301c59eb549fbcbe077c5c343a4ec191f0c51d5a
- SHA512
  
  e749dc66f52f616d82a23234b23821d9d64afbd4f64efdbfe80f723c8c58f447f3331961945d17a6939a969dd97e7e808322ba4c31917142ed0bf20ab1cb3f0d
- SSDEEP
  
  24576:GryVSoni8KgsSJ9S3giqGgHpv5meFZrEH7Q:konRuSJo3gAgHpRmed
Score

10^/10

sality backdoor discovery upx
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- Sality family
  sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Sality family

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2