General
-
Target
189a286d906a5ac797ed9efc40207e4b6c2925d9892040ac2ee73121bd113a1d
-
Size
102KB
-
Sample
241216-ypy4yszmfm
-
MD5
1eefbe88c0f2df517fbd81b205d09638
-
SHA1
3da0b37898b8fb6224c8014ed0264869811f7f23
-
SHA256
189a286d906a5ac797ed9efc40207e4b6c2925d9892040ac2ee73121bd113a1d
-
SHA512
8c7b7f577df0faeb813d52d2b2ecc91b5dfcdf15e711d205b3c6f96d35a6a44c0cf58d296c911778f4fb71de7dfcf6a2d3d6aef2c5f9aa47a94c6c9b4d61f3d0
-
SSDEEP
1536:jaK6bf0T8qoMfHjVM5/7IKrRrI9FL/tFOdEJRFhJmlJlrkisBzB0Yaw:uz0Qqxxe/7xtgRVJJRXk3lonrp
Static task
static1
Behavioral task
behavioral1
Sample
189a286d906a5ac797ed9efc40207e4b6c2925d9892040ac2ee73121bd113a1d.exe
Resource
win7-20240903-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
189a286d906a5ac797ed9efc40207e4b6c2925d9892040ac2ee73121bd113a1d
-
Size
102KB
-
MD5
1eefbe88c0f2df517fbd81b205d09638
-
SHA1
3da0b37898b8fb6224c8014ed0264869811f7f23
-
SHA256
189a286d906a5ac797ed9efc40207e4b6c2925d9892040ac2ee73121bd113a1d
-
SHA512
8c7b7f577df0faeb813d52d2b2ecc91b5dfcdf15e711d205b3c6f96d35a6a44c0cf58d296c911778f4fb71de7dfcf6a2d3d6aef2c5f9aa47a94c6c9b4d61f3d0
-
SSDEEP
1536:jaK6bf0T8qoMfHjVM5/7IKrRrI9FL/tFOdEJRFhJmlJlrkisBzB0Yaw:uz0Qqxxe/7xtgRVJJRXk3lonrp
-
Sality family
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
4