Managed XDR

e0bbc2fcedc284aa3730a223f9696204.virus (Sality) — malware analysis report

File info

Filename
e0bbc2fcedc284aa3730a223f9696204.virus
File type
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
File size
104 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
e0814874d0d6617cabde02bb9b1f1179f6f483e4
SHA256
4877532e4a9dc062fa4abe7fd0a38081421286e38cd78effc30ae8265acf1f87
MD5
e0bbc2fcedc284aa3730a223f9696204

Malwares

  • Sality

Signatures

Privilege Escalation

T1055 injection_failed: The attempt to inject into a process has failed

Defense Evasion

T1027.002 packer_upx: The executable file is compressed using UPX
T1027.002 packer_entropy: Probably contains compressed or encrypted data
T1055 injection_failed: The attempt to inject into a process has failed

Other

yara_rules: Static rules
no_graphical_activity: No graphic activity

Related reports