Extracted

• • Target

    69998d9275c47443804d5a6cf05ef69f9be6da031a7fcaf248f346affbb5d8fe

  • Size

    108KB

  • MD5

    6a4427f0665a9f8a533fa09b23c56106

  • SHA1

    01ebae0963bb735d3994f0df8d58b25aa66d7c29

  • SHA256

    69998d9275c47443804d5a6cf05ef69f9be6da031a7fcaf248f346affbb5d8fe

  • SHA512

    cd7203cb1abbc02a9eec97192710eeb2141685af51cfe1a5f4eb0b1d51cced3c7e0bb961798f9e1365f7f439f710becfddf39c4b74110138b12cef4c65d13635

  • SSDEEP

    1536:7N4RY2yieuNKqrjfCz1tq+FkfNqENUmwqyPBxZAIXEyJm:7NcY2yKNKSjfqlJmwJTG9ys

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2