Overview

overview

10

Static

static

3

JaffaCakes...d0.exe

windows7-x64

10

JaffaCakes...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_470eaa0d188a2fd9c5857e1b016d23d0

  • Size

    202KB

  • Sample

    250101-e157vsvkc1

  • MD5

    470eaa0d188a2fd9c5857e1b016d23d0

  • SHA1

    c7449f659f11180575402b29786d3e3ada18d6df

  • SHA256

    45697d098e4bf7477ce7edcbed770d2512d2f765bd71d4f1005c83c5a56a0361

  • SHA512

    755e6e28d25552bfb4dff74444f2a7ce186561949d12b77ba2550df7859fbe8621256754f4926128c84e69f0530c6508776515873f9bda899163329d582792d8

  • SSDEEP

    3072:2GX9wv7U6zwE+rliXKS0c41vn4s6pg/LW7Ch10lRN6FlMnDlQt6BgpsJrMYSQGY+:2KwDU6zIla0c41vuy67vVlQ9iYYLVc

Score
10/10
salitybackdoordiscoveryevasiontrojanupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

    • Target

      JaffaCakes118_470eaa0d188a2fd9c5857e1b016d23d0

    • Size

      202KB

    • MD5

      470eaa0d188a2fd9c5857e1b016d23d0

    • SHA1

      c7449f659f11180575402b29786d3e3ada18d6df

    • SHA256

      45697d098e4bf7477ce7edcbed770d2512d2f765bd71d4f1005c83c5a56a0361

    • SHA512

      755e6e28d25552bfb4dff74444f2a7ce186561949d12b77ba2550df7859fbe8621256754f4926128c84e69f0530c6508776515873f9bda899163329d582792d8

    • SSDEEP

      3072:2GX9wv7U6zwE+rliXKS0c41vn4s6pg/LW7Ch10lRN6FlMnDlQt6BgpsJrMYSQGY+:2KwDU6zIla0c41vuy67vVlQ9iYYLVc

    Score
    10/10
    salitybackdoordiscoveryupxevasiontrojan

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • Sality family

      sality

    • Windows security bypass

      evasiontrojan

    • Windows security modification

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks