General

  • Target

    7f6d9bcea99fc52f6682fae1764382d98d0da0fef4e569b3dc036472bff62aa4

  • Size

    949KB

  • Sample

    241213-h6rs7sskax

  • MD5

    7ae3c168f18e4aff8c8b9587bf149dca

  • SHA1

    7d5073e5a66ab55bc433f16ffd93aa8eed2e3736

  • SHA256

    7f6d9bcea99fc52f6682fae1764382d98d0da0fef4e569b3dc036472bff62aa4

  • SHA512

    0ee8388dae7f4ee2af0503ea49f603a0680ecae51a25b24bbea72c5250123ff9f5b764b667f0ef72c7d4a1e55a0fd1f188de38edfce22f890ec1f4781aef5501

  • SSDEEP

    24576:6uuBj3ZXqv05z21Pr1MHmGSJrZ5dUY9Aak6+:6V5q85kMGGSZZ5d19e6+

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      7f6d9bcea99fc52f6682fae1764382d98d0da0fef4e569b3dc036472bff62aa4

    • Size

      949KB

    • MD5

      7ae3c168f18e4aff8c8b9587bf149dca

    • SHA1

      7d5073e5a66ab55bc433f16ffd93aa8eed2e3736

    • SHA256

      7f6d9bcea99fc52f6682fae1764382d98d0da0fef4e569b3dc036472bff62aa4

    • SHA512

      0ee8388dae7f4ee2af0503ea49f603a0680ecae51a25b24bbea72c5250123ff9f5b764b667f0ef72c7d4a1e55a0fd1f188de38edfce22f890ec1f4781aef5501

    • SSDEEP

      24576:6uuBj3ZXqv05z21Pr1MHmGSJrZ5dUY9Aak6+:6V5q85kMGGSZZ5d19e6+

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

    • Sality family

    • Windows security bypass

    • Windows security modification

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks