sality | c0d098cae5627f376c8a3f54f2dcf74ca605cfe28e237a02fbf1a39b20b93d32 | Triage

Sharing

General

Target

JaffaCakes118_57e4775831e811a080510d10558fa7f1
Size

194KB
Sample

250129-rq482a1jfv
MD5

57e4775831e811a080510d10558fa7f1
SHA1

1bae8285cb5e0ba266a1ea4b6ad1e10cf3f77bb6
SHA256

c0d098cae5627f376c8a3f54f2dcf74ca605cfe28e237a02fbf1a39b20b93d32
SHA512

91dfd1a3c84df6f9762b13a5120560e9b540819fea2724de6cf42dc98a46131d939b81a234147b395c59366ef68d74a439cc2b664706f23e2c3cbd7f686ee941
SSDEEP

6144:KpTRpWQScBvTsoxW8T3HKj+aho15Rl2hujqe:MpHScBvTsoxWiRKo1hR

Score

10^/10

sality backdoor defense_evasion discovery trojan upx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

Targets

- Target
  
  JaffaCakes118_57e4775831e811a080510d10558fa7f1
- Size
  
  194KB
- MD5
  
  57e4775831e811a080510d10558fa7f1
- SHA1
  
  1bae8285cb5e0ba266a1ea4b6ad1e10cf3f77bb6
- SHA256
  
  c0d098cae5627f376c8a3f54f2dcf74ca605cfe28e237a02fbf1a39b20b93d32
- SHA512
  
  91dfd1a3c84df6f9762b13a5120560e9b540819fea2724de6cf42dc98a46131d939b81a234147b395c59366ef68d74a439cc2b664706f23e2c3cbd7f686ee941
- SSDEEP
  
  6144:KpTRpWQScBvTsoxW8T3HKj+aho15Rl2hujqe:MpHScBvTsoxWiRKo1hR
Score

10^/10

discovery sality backdoor defense_evasion trojan upx
- Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- Sality family
  sality
- UAC bypass
  defense_evasion trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

salitybackdoordefense_evasiondiscoverytrojanupx