Overview

overview

10

Static

static

3

JaffaCakes...38.exe

windows7-x64

10

JaffaCakes...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_570f675020b947300344973af00c0838

  • Size

    96KB

  • Sample

    250306-vc629aszes

  • MD5

    570f675020b947300344973af00c0838

  • SHA1

    80276f7f0a07e3a862fa435f3551fa8472896cd9

  • SHA256

    65ad67d99ee3524e19fcdc97ec3470ca663380c6560511a818ed66c519cf14ae

  • SHA512

    62a6fd30a5fd6d2b6a395b34ad25d61fc79f94fcba6beb2327797acdec01632fa5bc850efd988635f9e5b0209b745fab39a4f2e633975606e6de0cd9c0480d18

  • SSDEEP

    1536:hrWs9Wa/dCLUaxA1B7qihvXpURpxtoRg2FSiPAXx8pL+tLGYk52cv8up6bOSRFa:hb/8LUaxa7/4T3oiX6A2paJGicEuga

Score
10/10
salitybackdoordiscoveryupx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/

http://kukutrustnet777.info/home.gif

http://kukutrustnet888.info/home.gif

http://kukutrustnet987.info/home.gif

http://www.klkjwre9fqwieluoi.info/

http://kukutrustnet777888.info/

http://klkjwre77638dfqwieuoi888.info/

Targets

    • Target

      JaffaCakes118_570f675020b947300344973af00c0838

    • Size

      96KB

    • MD5

      570f675020b947300344973af00c0838

    • SHA1

      80276f7f0a07e3a862fa435f3551fa8472896cd9

    • SHA256

      65ad67d99ee3524e19fcdc97ec3470ca663380c6560511a818ed66c519cf14ae

    • SHA512

      62a6fd30a5fd6d2b6a395b34ad25d61fc79f94fcba6beb2327797acdec01632fa5bc850efd988635f9e5b0209b745fab39a4f2e633975606e6de0cd9c0480d18

    • SSDEEP

      1536:hrWs9Wa/dCLUaxA1B7qihvXpURpxtoRg2FSiPAXx8pL+tLGYk52cv8up6bOSRFa:hb/8LUaxa7/4T3oiX6A2paJGicEuga

    Score
    10/10
    salitybackdoordiscoveryupx

    • Sality

      Sality is backdoor written in C++, first discovered in 2003.

      backdoorsality

    • Sality family

      sality

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks