Extracted

• • Target

    32eebfe0169fe11ad2d8b73b95a4616f444dd5915f0e748fbb7009974805076f

  • Size

    143KB

  • MD5

    72d42beb983f34ac606de48e939a5b10

  • SHA1

    7b998633ae146e7826ababb42e3be759dc581852

  • SHA256

    32eebfe0169fe11ad2d8b73b95a4616f444dd5915f0e748fbb7009974805076f

  • SHA512

    0ab075f6b20fd1028ee8aa271f2cf825267b053b3f8e958cf538ff27bf5a62b3b59103acf184ac988fbc14e7e634faa7db5951dd635f684c75e041069e1ff0bb

  • SSDEEP

    3072:FNQKPWDy/I0fFJltZrpReFX3BLP/YZ2fTYuf0vAxDguBjINjq8ffvvo/W3:FNSDy/IkFthpSLPEJusvAGuBc08n3o/2

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2