sality | 08fc18bedeb154975d4a0faa47bdba94b4a9d845b228870e6ba82e10973d32c0 | Triage™

Login
Reports

Overview

overview

Static

static

3

08fc18bede...c0.exe

windows10-2004-x64

08fc18bede...c0.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
08fc18bedeb154975d4a0faa47bdba94b4a9d845b228870e6ba82e10973d32c0
Size 3.7MB
Sample260905-ve263sfk7t
SHA256 08fc18bedeb154975d4a0faa47bdba94b4a9d845b228870e6ba82e10973d32c0
MD5 8557bd967574b5c969292171c7fa56c6
SHA1 5c5254f400cfbee28b58dca3684720dcbd5cad0d
SHA512 e3a098b4244cb7f4bd350894f169f34ea749ff59219d8f473b7c33b72a2c21badc7485da28d4fb58e2509139090acc3d7841e56b7ea8a84ec54718221afb6a2f
SSDEEP 98304:KfFBhynN+ET4M9uWTGwOB4CN1nyKAd/vt9Zx4bs:K9BhqT4hnnnyKAdHP34Y
TLSH
T13806AD41B610C236C29934F24C56A6FDA2B97C14AE15C62736BDB31E3EB769BCD0234D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

sality backdoor defense_evasion discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

08fc18bedeb154975d4a0faa47bdba94b4a9d845b228870e6ba82e10973d32c0.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

backdoor defense_evasion discovery sality trojan upx

Behavioral task

behavioral2

Sample

08fc18bedeb154975d4a0faa47bdba94b4a9d845b228870e6ba82e10973d32c0.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

backdoor defense_evasion discovery sality trojan upx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/

Targets

- Target
  08fc18bedeb154975d4a0faa47bdba94b4a9d845b228870e6ba82e10973d32c0
- Size 3.7MB
- SHA256 08fc18bedeb154975d4a0faa47bdba94b4a9d845b228870e6ba82e10973d32c0
- MD5 8557bd967574b5c969292171c7fa56c6
- SHA1 5c5254f400cfbee28b58dca3684720dcbd5cad0d
- SHA512 e3a098b4244cb7f4bd350894f169f34ea749ff59219d8f473b7c33b72a2c21badc7485da28d4fb58e2509139090acc3d7841e56b7ea8a84ec54718221afb6a2f
- SSDEEP 98304:KfFBhynN+ET4M9uWTGwOB4CN1nyKAd/vt9Zx4bs:K9BhqT4hnnnyKAdHP34Y
- TLSH
  T13806AD41B610C236C29934F24C56A6FDA2B97C14AE15C62736BDB31E3EB769BCD0234D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor defense_evasion discovery sality trojan upx
- Family: Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- Modifies firewall policy service
  defense_evasion
- UAC bypass
  defense_evasion trojan
- Windows security bypass
  defense_evasion trojan
- Windows security modification
  defense_evasion trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Create or Modify System Process

Windows Service

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

backdoordefense_evasiondiscoverysalitytrojanupx

behavioral2

backdoordefense_evasiondiscoverysalitytrojanupx

© 2018-2026

Terms | Privacy