Sality

Sality is backdoor written in C++, first discovered in 2003.

UAC bypass

Windows security bypass

suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

suricata: ET MALWARE Sality - Fake Opera User-Agent

suricata: ET MALWARE Sality - Fake Opera User-Agent

suricata: ET MALWARE Win32.Sality-GR Checkin

suricata: ET MALWARE Win32.Sality-GR Checkin

Contacts a large (845) amount of remote hosts

This may indicate a network scan to discover remotely running services.

Disables RegEdit via registry modification

Disables Task Manager via registry modification

Executes dropped EXE

Modifies Windows Firewall

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.