Extracted

• • Target

    7d4551aadf71d107d63a938b505e295ab6deb04cb3e903d69689eee12c77ba6f

  • Size

    271KB

  • MD5

    961717f84c8e81fe2c3b21754460900d

  • SHA1

    7af3b30d3a3d70dff74331d5e502f6f6863fb29a

  • SHA256

    7d4551aadf71d107d63a938b505e295ab6deb04cb3e903d69689eee12c77ba6f

  • SHA512

    008809159f2407288087773761d84c19db4fca76b68691aa3c7228a7b0d0adc474ea8b73ca977ec819a4caa7651ce63f7aaefe690dbde94a046450dbb800d42a

  • SSDEEP

    6144:/u2urzh1xu/XkauuIN+fY3HqOhzyuX6R+N1KdRBIrNuYRs:/utrzh1xOXkJbKOhzv12Kta

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2