Extracted

• • Target

    2d9cfd337ba510369c7f235b9c058805051c8d298d168af74bd8c3f557e37852

  • Size

    168KB

  • MD5

    76f053e92693ff04a47d06fff4b37806

  • SHA1

    75a371937353f3c8decb1ace10a0a71bbd1c1078

  • SHA256

    2d9cfd337ba510369c7f235b9c058805051c8d298d168af74bd8c3f557e37852

  • SHA512

    f599f9cc94131a1e4f9268b335a626968f5015e9f2e56cb3d7b8ccb6a3911fa7cf0100d3146096ae21caf14e1f00ab7bbd79d21d5574db7ef8bda5c5fc6200ad

  • SSDEEP

    3072:BNQKPWDyiI0/JltZrpRpc8/XPV3cvbBI4eM:BNSDyiIAthpHcFI4eM

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2