Overview

overview

10

Static

static

3

2025-02-03...ia.exe

windows7-x64

10

2025-02-03...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-03_f06e767375f4e562c3736548b8046476_floxif_mafia

  • Size

    311KB

  • Sample

    250203-1fbcmswlbq

  • MD5

    f06e767375f4e562c3736548b8046476

  • SHA1

    05ce87acade868a74a7d140e3d655db8e9782573

  • SHA256

    ea7979adaa521cd1ea9a26ace8b8e99c9daf5afecaf7b6d8122e16c2c5c98807

  • SHA512

    016c2cf75b7511b881e56d477e0b02cea472e6b7ac8c284ada18341bbfc1bfcd861fad712277272084c972474eab70098830c717998432a35b9b713f170a5bb1

  • SSDEEP

    6144:VbEN4SdDMjPgZlNn/IcpGnzh3obcJ+mvaBV+UdvrEFp7hK6cawc:VGdDMjPgnNn/ppOzhmcY2aBjvrEH7RHb

Score
10/10
salitybackdoordiscoveryupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

Targets

    • Target

      2025-02-03_f06e767375f4e562c3736548b8046476_floxif_mafia

    • Size

      311KB

    • MD5

      f06e767375f4e562c3736548b8046476

    • SHA1

      05ce87acade868a74a7d140e3d655db8e9782573

    • SHA256

      ea7979adaa521cd1ea9a26ace8b8e99c9daf5afecaf7b6d8122e16c2c5c98807

    • SHA512

      016c2cf75b7511b881e56d477e0b02cea472e6b7ac8c284ada18341bbfc1bfcd861fad712277272084c972474eab70098830c717998432a35b9b713f170a5bb1

    • SSDEEP

      6144:VbEN4SdDMjPgZlNn/IcpGnzh3obcJ+mvaBV+UdvrEFp7hK6cawc:VGdDMjPgnNn/ppOzhmcY2aBjvrEH7RHb

    Score
    10/10
    salitybackdoordiscoveryupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • Sality family

      sality

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks