ThaiCERT    ETDA    MDES
Report
Search
Home > List all groups > List all tools > List all groups using tool Sality

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: Sality

NamesSality
Sector
Kuku
SalLoad
Kookoo
SaliCode
Kukacka
CategoryMalware
TypeBotnet, Worm, Downloader, Loader
Description(Cylance) The Sality virus infects local executables, removable storage, and remotely shared drives. It creates a peer-to-peer botnet which facilitates the downloading and execution of other malware. Sality can perform malicious code injection and modify its entry point to force code execution. This malware remains viable by adopting the successful strategies of other threats, implementing techniques like rootkit/backdoor capability, keylogging, and worm-like propagation.
Information<https://threatvector.cylance.com/en_us/home/cylance-vs-sality-malware.html>
<https://www.botconf.eu/wp-content/uploads/2015/12/OK-P18-Kleissner-Sality.pdf>
<https://en.wikipedia.org/wiki/Sality>
Malpedia<https://malpedia.caad.fkie.fraunhofer.de/details/win.sality>
AlienVault OTX<https://otx.alienvault.com/browse/pulses?q=tag:Sality>

Last change to this tool card: 23 May 2020

Download this tool card in JSON format

Previous: Salgorea
Next: SALTLICK

All groups using tool Sality

ChangedNameCountryObserved

Other groups

 Salty SpiderRussia2003-Dec 2018 

1 group listed (0 APT, 1 other, 0 unknown)

Thailand Computer Emergency Response Team (ThaiCERT)
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1234
E-mail report@thaicert.or.th
PGP Download PGP key