General

  • Target

    7cce713b0a03a2413f325e2bc0756960620204e30823b230f5a9a86584783f4b

  • Size

    976KB

  • Sample

    241213-gy5jnazras

  • MD5

    86a8d5c6c6e4f5edc06f0b6d4d72d0c5

  • SHA1

    27348ff4ec9026aac74502a13a253d9f00359f7c

  • SHA256

    7cce713b0a03a2413f325e2bc0756960620204e30823b230f5a9a86584783f4b

  • SHA512

    211a6b74922f4ac20f33ff839f066f3d682f3d5e553d703bc6043858e7a8572861b46a88eda3089894c15ea30bc6210e276238ea08429bc30d7efe38694cb656

  • SSDEEP

    24576:geZVDBdxLiPF2vfxxb6ZpwM0I+4OK7q4BJ:xVDTst2XxMZpwe+Qq4BJ

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      7cce713b0a03a2413f325e2bc0756960620204e30823b230f5a9a86584783f4b

    • Size

      976KB

    • MD5

      86a8d5c6c6e4f5edc06f0b6d4d72d0c5

    • SHA1

      27348ff4ec9026aac74502a13a253d9f00359f7c

    • SHA256

      7cce713b0a03a2413f325e2bc0756960620204e30823b230f5a9a86584783f4b

    • SHA512

      211a6b74922f4ac20f33ff839f066f3d682f3d5e553d703bc6043858e7a8572861b46a88eda3089894c15ea30bc6210e276238ea08429bc30d7efe38694cb656

    • SSDEEP

      24576:geZVDBdxLiPF2vfxxb6ZpwM0I+4OK7q4BJ:xVDTst2XxMZpwe+Qq4BJ

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

    • Sality family

    • Windows security bypass

    • Windows security modification

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks