General

  • Target

    f89d55a31c6c240bab4432cb4a011acc6a5a6db988d03cccee2d94797e546505

  • Size

    976KB

  • Sample

    241213-nf4b7swqh1

  • MD5

    cec6c7e3e5a46818025fb2a30d3d71c1

  • SHA1

    80be95af0e0a6bfceec16d1869ec23912c2f999a

  • SHA256

    f89d55a31c6c240bab4432cb4a011acc6a5a6db988d03cccee2d94797e546505

  • SHA512

    5107221e3482cd2a7d126348b0faa423cbffa0d5638d8aad5748da60377e4689574da8498156a7be5a2c3d9be9cd7c6aa238e8e57cc69537c5539cc9cd247d00

  • SSDEEP

    12288:562zeB/vtDBrhOGd9X8WoKeD/g7YRbKMIvsexWDyNjxsHq6ZpwM0SP3+IUUqMOSp:zeZVDBdxLi3F2vfxxb6ZpwM0I+0qMxp

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

    • Target

      f89d55a31c6c240bab4432cb4a011acc6a5a6db988d03cccee2d94797e546505

    • Size

      976KB

    • MD5

      cec6c7e3e5a46818025fb2a30d3d71c1

    • SHA1

      80be95af0e0a6bfceec16d1869ec23912c2f999a

    • SHA256

      f89d55a31c6c240bab4432cb4a011acc6a5a6db988d03cccee2d94797e546505

    • SHA512

      5107221e3482cd2a7d126348b0faa423cbffa0d5638d8aad5748da60377e4689574da8498156a7be5a2c3d9be9cd7c6aa238e8e57cc69537c5539cc9cd247d00

    • SSDEEP

      12288:562zeB/vtDBrhOGd9X8WoKeD/g7YRbKMIvsexWDyNjxsHq6ZpwM0SP3+IUUqMOSp:zeZVDBdxLi3F2vfxxb6ZpwM0I+0qMxp

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

    • Sality family

    • Windows security bypass

    • Windows security modification

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks