sality | e1cbddbb600e424f6e4d775fa9a186b0725b1318950cc93bff9ea105969e7334 | Triage™

Login
Reports

Overview

overview

Static

static

3

jaffacakes...en.exe

windows10-2004-x64

jaffacakes...en.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Sality.gen.ea8da1e47374f4ac1cf00
Size 628KB
Sample261014-p2fnpsc17j
SHA256 e1cbddbb600e424f6e4d775fa9a186b0725b1318950cc93bff9ea105969e7334
MD5 01c3a741772ea8da1e47374f4ac1cf00
SHA1 16ff158af45642f4573aec567c955c63b719786a
SHA512 a23d500c8ebd01bad6b06706b5cb891ab1a6a59e6982adc852c94632ce0803134649d2ff89f1795a0f3072dda3cb2f9b0035c45f609e2167263a2aa4ea108e4b
SSDEEP 12288:s+F4EWSsIq7MapxhaRAPNrBQ+2m1SrlnvlzdFbL/4IgG+6ZERVm:F2JBhJPNQCCvlRxDyG+6x
TLSH
T1E4D46C01A641D036F9F315F6DAFE462EAA28AD31170554C7A3C45F6E5F21AF27E3023A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

sality backdoor defense_evasion discovery trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_Virus.Win32.Sality.gen.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

12 signatures

150 seconds

backdoor defense_evasion discovery sality trojan upx

Behavioral task

behavioral2

Sample

jaffacakes118_Virus.Win32.Sality.gen.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

backdoor defense_evasion discovery sality trojan upx

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif

Targets

- Target
  jaffacakes118_Virus.Win32.Sality.gen.ea8da1e47374f4ac1cf00
- Size 628KB
- SHA256 e1cbddbb600e424f6e4d775fa9a186b0725b1318950cc93bff9ea105969e7334
- MD5 01c3a741772ea8da1e47374f4ac1cf00
- SHA1 16ff158af45642f4573aec567c955c63b719786a
- SHA512 a23d500c8ebd01bad6b06706b5cb891ab1a6a59e6982adc852c94632ce0803134649d2ff89f1795a0f3072dda3cb2f9b0035c45f609e2167263a2aa4ea108e4b
- SSDEEP 12288:s+F4EWSsIq7MapxhaRAPNrBQ+2m1SrlnvlzdFbL/4IgG+6ZERVm:F2JBhJPNQCCvlRxDyG+6x
- TLSH
  T1E4D46C01A641D036F9F315F6DAFE462EAA28AD31170554C7A3C45F6E5F21AF27E3023A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor defense_evasion discovery sality trojan upx
- Family: Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- Modifies firewall policy service
  defense_evasion
- UAC bypass
  defense_evasion trojan
- Windows security bypass
  defense_evasion trojan
- Windows security modification
  defense_evasion trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Create or Modify System Process

Windows Service

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

backdoordefense_evasiondiscoverysalitytrojanupx

behavioral2

backdoordefense_evasiondiscoverysalitytrojanupx

© 2018-2026

Terms | Privacy