Extracted

• • Target

    483d00446571fadebc88f60ad2d46b68febe4d5acb64de86be2644eb7a89bbd9

  • Size

    84KB

  • MD5

    08b18bdbc30f199fa7a03e6dfdb37330

  • SHA1

    52516279cad0904d773af1e4e36f19ce4a0c90de

  • SHA256

    483d00446571fadebc88f60ad2d46b68febe4d5acb64de86be2644eb7a89bbd9

  • SHA512

    3f20afc25c40e7a4b75389a638147c4b0187e9d8dc792e5dd82235b920cfbb3d76d1916d3b6d4522a6e79f158f73dd1c278cfa8b39770b62e8070cd66a4b88a8

  • SSDEEP

    1536:hxIk2dnNLJI3jdp6LxqcGJyZJiFz5EEIY07KaVyy4:hxOdg3jdp6jioJw9Eu07Nyy

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2