sality | 9cb40a097d2e9fcce633ff48e43804a364662d92f2bbeae35af2c5e32dab39df | Triage™

Login
Reports

Overview

overview

Static

static

3

jaffacakes...en.exe

windows10-2004-x64

jaffacakes...en.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Sality.gen.92e88ac49e115d1312d7628df2186772
Size 98KB
Sample261014-pyf53ac14k
SHA256 9cb40a097d2e9fcce633ff48e43804a364662d92f2bbeae35af2c5e32dab39df
MD5 92e88ac49e115d1312d7628df2186772
SHA1 00d2972dec09d0ec0c4272249fca1cbc39f6b943
SHA512 ff4e7e026ba5c96750eb63574adfccdc4bfc2b95d32d56d6c12717e4108be1582b140d8b3623ad04fc668fcb97b5e990181fbf562ecf4ff94af213beebf323e8
SSDEEP 1536:bFz/aVMaIf8zSVur+K9SrJ5MnEvYRs2zs8yT9+EX/k2UPi6RDcBTE33TNaSdAXw8:FSmd6Hsr7F/2oVAEXbaI03TyQY
TLSH
T1C0A3D111F5FA5536E051E0F161B041369AFAA3C82B5B8FCB97AAD56188341F385F33B8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

sality backdoor defense_evasion discovery persistence privilege_escalation trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_Virus.Win32.Sality.gen.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

13 signatures

150 seconds

backdoor defense_evasion discovery sality persistence privilege_escalation trojan upx

Behavioral task

behavioral2

Sample

jaffacakes118_Virus.Win32.Sality.gen.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Extracted

Family

sality

C2

http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif

Targets

- Target
  jaffacakes118_Virus.Win32.Sality.gen.92e88ac49e115d1312d7628df2186772
- Size 98KB
- SHA256 9cb40a097d2e9fcce633ff48e43804a364662d92f2bbeae35af2c5e32dab39df
- MD5 92e88ac49e115d1312d7628df2186772
- SHA1 00d2972dec09d0ec0c4272249fca1cbc39f6b943
- SHA512 ff4e7e026ba5c96750eb63574adfccdc4bfc2b95d32d56d6c12717e4108be1582b140d8b3623ad04fc668fcb97b5e990181fbf562ecf4ff94af213beebf323e8
- SSDEEP 1536:bFz/aVMaIf8zSVur+K9SrJ5MnEvYRs2zs8yT9+EX/k2UPi6RDcBTE33TNaSdAXw8:FSmd6Hsr7F/2oVAEXbaI03TyQY
- TLSH
  T1C0A3D111F5FA5536E051E0F161B041369AFAA3C82B5B8FCB97AAD56188341F385F33B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor defense_evasion discovery sality persistence privilege_escalation trojan upx
- Family: Sality
  Sality is backdoor written in C++, first discovered in 2003.
  backdoor sality
- UAC bypass
  defense_evasion trojan
- Windows security bypass
  defense_evasion trojan
- Disables RegEdit via registry modification
  defense_evasion
- Disables Task Manager via registry modification
  defense_evasion
- Modifies Windows Firewall
  defense_evasion
- Windows security modification
  defense_evasion trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

backdoordefense_evasiondiscoverysalitypersistenceprivilege_escalationtrojanupx

behavioral2

© 2018-2026

Terms | Privacy