sality

General

Target

ef0ff26223571e56d13c4f843a7933412377463788a037d5836c78ef10ecf02f
Size

262KB
Sample

241224-r2kc1azkgy
MD5

e2644809f0a3d0bb04cc785f9b86acae
SHA1

862c001f37c56082497632647c2b629b44ece416
SHA256

ef0ff26223571e56d13c4f843a7933412377463788a037d5836c78ef10ecf02f
SHA512

a6f9d63cba54e9c0d13ba3f8e477dfb4609fc6d166ade6d59147e30d547c296db2456cbb7dc6c543798cc266c06c510b16abb25341ea9e98e5a31cda2e2a0585
SSDEEP

6144:WIZTK/5qUBjUJvMqK4/B4nkZFFJ11sAthE4XfZLqHzgr:WIxKhDpUo4/BK0FDsMhdXhLXr

Score

10^/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

- Target
  
  ef0ff26223571e56d13c4f843a7933412377463788a037d5836c78ef10ecf02f
- Size
  
  262KB
- MD5
  
  e2644809f0a3d0bb04cc785f9b86acae
- SHA1
  
  862c001f37c56082497632647c2b629b44ece416
- SHA256
  
  ef0ff26223571e56d13c4f843a7933412377463788a037d5836c78ef10ecf02f
- SHA512
  
  a6f9d63cba54e9c0d13ba3f8e477dfb4609fc6d166ade6d59147e30d547c296db2456cbb7dc6c543798cc266c06c510b16abb25341ea9e98e5a31cda2e2a0585
- SSDEEP
  
  6144:WIZTK/5qUBjUJvMqK4/B4nkZFFJ11sAthE4XfZLqHzgr:WIxKhDpUo4/BK0FDsMhdXhLXr
Score

10^/10

sality backdoor discovery upx
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- Sality family
  sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Sality family

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2