Extracted

• • Target

    49f4b7725652a598cf7a4e12a8ef0d8ccdc2fdbfeddd80800e872e7a10c22386

  • Size

    208KB

  • MD5

    62844faa72790dd4cf92103ead228935

  • SHA1

    8ea149f55564f04dfca282a9cc1f8d6030322cfb

  • SHA256

    49f4b7725652a598cf7a4e12a8ef0d8ccdc2fdbfeddd80800e872e7a10c22386

  • SHA512

    2ff4e51ab44acb9271acc3a5430f6f4e52cc4da734e5f2be60c0049f8c89435e4818fc9e0a299f057109421cceb19099b68a4ede48658680fcfd4b6f8e3e7db9

  • SSDEEP

    3072:qZZzYQ1g9NCXzBnJTSor91TleTviWjZqMNMKGHrihbz/gohKegGSE30:CZzYQa9wDBn8e9wJvdur4bz/goMB1i0

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2