sality

General

Target

d395fba53f8dad6a1e76add8cb7c98aad1ba99ba88658f872441e24f5845d7bbN.exe
Size

197KB
Sample

241231-n4hqeayqcx
MD5

23a7da9dd8920afeca46931c6636c3e0
SHA1

e741fdb0ff09d5a10391fb5863f555a9b7a10d79
SHA256

d395fba53f8dad6a1e76add8cb7c98aad1ba99ba88658f872441e24f5845d7bb
SHA512

402d6f0834777adf56a2556fdabf22c5b0d3077c0fe899c7e42219031f1b78ea1b0d77e0d7e3b53c1d1196d13a15c5a02b566d02416716394e4cde97e04b2df6
SSDEEP

3072:Ih12pjxoWVNBUNBqEVNBUNBqSV70n0yKSeRIJ9HMXktd7K:W123aNBqEaNBqv0yveRIJ9HAE7K

Score

10^/10

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

- Target
  
  d395fba53f8dad6a1e76add8cb7c98aad1ba99ba88658f872441e24f5845d7bbN.exe
- Size
  
  197KB
- MD5
  
  23a7da9dd8920afeca46931c6636c3e0
- SHA1
  
  e741fdb0ff09d5a10391fb5863f555a9b7a10d79
- SHA256
  
  d395fba53f8dad6a1e76add8cb7c98aad1ba99ba88658f872441e24f5845d7bb
- SHA512
  
  402d6f0834777adf56a2556fdabf22c5b0d3077c0fe899c7e42219031f1b78ea1b0d77e0d7e3b53c1d1196d13a15c5a02b566d02416716394e4cde97e04b2df6
- SSDEEP
  
  3072:Ih12pjxoWVNBUNBqEVNBUNBqSV70n0yKSeRIJ9HMXktd7K:W123aNBqEaNBqv0yveRIJ9HAE7K
Score

10^/10

sality backdoor upx discovery
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- Sality family
  sality
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Sality family

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2