Extracted

• • Target

    7987a0d85aea3f83abbfec5377a2be34687fe69861dbc5caf249b4dada26b1b9

  • Size

    115KB

  • MD5

    6e3a79bfe652cb528ac503ff0fe534b0

  • SHA1

    e414b33da7118565c17c7ae78b8a8a763de002b4

  • SHA256

    7987a0d85aea3f83abbfec5377a2be34687fe69861dbc5caf249b4dada26b1b9

  • SHA512

    48cf2bf8145e17492cf0347410295d7e6375069d90163085c222e7da33514af6de24f457af908d1129efed6ef5e77aaa5fd4c55b69beb521c2e65166781d9002

  • SSDEEP

    3072:cQIFSRTXJIceAm1INwyztfodL1Ju4WdoUNRScvitgQ:crMqm5lodLT3WDviF

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2