Overview

overview

10

Static

static

10

d9731e7748...18.exe

windows7-x64

10

d9731e7748...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9731e7748b49c037af6b91ad4a90509fac873a9857afdb63737eec8cec2d718

  • Size

    53KB

  • MD5

    fdc5590af1f907d895b5dc5421c94ef2

  • SHA1

    9349702170553647bd55c1b0b6ff73139c8a782b

  • SHA256

    d9731e7748b49c037af6b91ad4a90509fac873a9857afdb63737eec8cec2d718

  • SHA512

    dee3ea0bb46803aad1ed5c19f36f0789d2eba6da0caff7afc1ea19b1d64ebc92f1a923151bdbf0188b8fd733a21283405f0667018458cab38386026a60bf291b

  • SSDEEP

    768:9W3cSlv6V/zeetSqiwkCAN6grUrlMlnJBIAQNuwQWtQl5nLlgG:8fu/ztSqiwkCAN6IlnrIhPtQJ3

Score
10/10
upxsality

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Signatures

  • Sality family
    sality
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d9731e7748b49c037af6b91ad4a90509fac873a9857afdb63737eec8cec2d718
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections