General
-
Target
e01009df04878cde68a9ff6f0923e60eef4d0fd3a7bd3fbcad368ea81697af9e
-
Size
2.6MB
-
Sample
241220-h8e77asrgv
-
MD5
39127a5c36fbf6bfc192853b6c51e41d
-
SHA1
73750052bc14c1f0017e87e06107c519606b6da0
-
SHA256
e01009df04878cde68a9ff6f0923e60eef4d0fd3a7bd3fbcad368ea81697af9e
-
SHA512
3e2887d87f271447d0d3705d3138e1ccf639b50ecc1e0bcffdf7d388830284fe23b81893a5c5826bb981003ab09c5d6647a24ab83441c6b48837018682f00ac0
-
SSDEEP
49152:VELOpKnXu2dN8L+RXvKaTM+MTHUPDJG4CZqDs4hP7CpIC/:VELOpKXu2dZvKaTs2JGBq44u
Static task
static1
Behavioral task
behavioral1
Sample
e01009df04878cde68a9ff6f0923e60eef4d0fd3a7bd3fbcad368ea81697af9e.exe
Resource
win7-20240903-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
e01009df04878cde68a9ff6f0923e60eef4d0fd3a7bd3fbcad368ea81697af9e
-
Size
2.6MB
-
MD5
39127a5c36fbf6bfc192853b6c51e41d
-
SHA1
73750052bc14c1f0017e87e06107c519606b6da0
-
SHA256
e01009df04878cde68a9ff6f0923e60eef4d0fd3a7bd3fbcad368ea81697af9e
-
SHA512
3e2887d87f271447d0d3705d3138e1ccf639b50ecc1e0bcffdf7d388830284fe23b81893a5c5826bb981003ab09c5d6647a24ab83441c6b48837018682f00ac0
-
SSDEEP
49152:VELOpKnXu2dN8L+RXvKaTM+MTHUPDJG4CZqDs4hP7CpIC/:VELOpKXu2dZvKaTs2JGBq44u
-
Modifies firewall policy service
-
Sality family
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
5