General
- Target 6f7e1f20687f07fef1f9cba3bff623d4b89c48581fa12ce4d2a7cb49fd406901
- Size 984KB
- Sample260817-nfswgaba76
- SHA256 6f7e1f20687f07fef1f9cba3bff623d4b89c48581fa12ce4d2a7cb49fd406901
Score
10/10
Malware Config
Extracted
Family
-
sality
C2
-
http://89.119.67.154/testo5/
-
http://kukutrustnet777.info/home.gif
-
http://kukutrustnet888.info/home.gif
-
http://kukutrustnet987.info/home.gif
-
http://www.klkjwre9fqwieluoi.info/
-
http://kukutrustnet777888.info/
Targets
-
- Target 6f7e1f20687f07fef1f9cba3bff623d4b89c48581fa12ce4d2a7cb49fd406901
- Size 984KB
- SHA256 6f7e1f20687f07fef1f9cba3bff623d4b89c48581fa12ce4d2a7cb49fd406901
Score10/10-
Family: Sality
Sality is backdoor written in C++, first discovered in 2003.
-
Windows security bypass
-
Windows security modification
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.