sality | 5e18f13302f234e5714887c68f42d8f4597f2f6ce16421d5b492c73200c8550c | Triage™

Login
Reports

Overview

overview

Static

static

3

5e18f13302...0c.exe

windows10-2004-x64

5e18f13302...0c.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
5e18f13302f234e5714887c68f42d8f4597f2f6ce16421d5b492c73200c8550c
Size 1020KB
Sample260810-ee2bsa1ajc
SHA256 5e18f13302f234e5714887c68f42d8f4597f2f6ce16421d5b492c73200c8550c
MD5 b260394fdbe58801350dc86318b7b3e2
SHA1 f0c65b0d72e1c54c489e092620c4155af4e1176c
SHA512 88050e081faa00bf296a689e5cffb79652ed3442785dbe9fae2a6816e914adc9db81313ff4ae8b86fb6377d725ae115f265fa59918755ade26713f3aa21ed6c7
SSDEEP 24576:NF+9U43i2W1n/yoHsX/KNqeoHIhwtzPasui:q9xvWEWsPEqeoHIhwxCsui
TLSH
T1DB251251B7C09C32F9734D3650F46A253E3CBA201B949DEB77CD421E2F645C5AAB8A23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

sality backdoor defense_evasion discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

5e18f13302f234e5714887c68f42d8f4597f2f6ce16421d5b492c73200c8550c.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

backdoor defense_evasion discovery sality trojan upx

Behavioral task

behavioral2

Sample

5e18f13302f234e5714887c68f42d8f4597f2f6ce16421d5b492c73200c8550c.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

backdoor defense_evasion discovery sality trojan upx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif

Targets

- Target
  5e18f13302f234e5714887c68f42d8f4597f2f6ce16421d5b492c73200c8550c
- Size 1020KB
- SHA256 5e18f13302f234e5714887c68f42d8f4597f2f6ce16421d5b492c73200c8550c
- MD5 b260394fdbe58801350dc86318b7b3e2
- SHA1 f0c65b0d72e1c54c489e092620c4155af4e1176c
- SHA512 88050e081faa00bf296a689e5cffb79652ed3442785dbe9fae2a6816e914adc9db81313ff4ae8b86fb6377d725ae115f265fa59918755ade26713f3aa21ed6c7
- SSDEEP 24576:NF+9U43i2W1n/yoHsX/KNqeoHIhwtzPasui:q9xvWEWsPEqeoHIhwxCsui
- TLSH
  T1DB251251B7C09C32F9734D3650F46A253E3CBA201B949DEB77CD421E2F645C5AAB8A23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor defense_evasion discovery sality trojan upx
- Family: Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- Modifies firewall policy service
  defense_evasion
- UAC bypass
  defense_evasion trojan
- Windows security bypass
  defense_evasion trojan
- Windows security modification
  defense_evasion trojan
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Create or Modify System Process

Windows Service

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

backdoordefense_evasiondiscoverysalitytrojanupx

behavioral2

backdoordefense_evasiondiscoverysalitytrojanupx

© 2018-2026

Terms | Privacy