Extracted

• • Target

    29ff7f2dc5e08679845d5a4e1b848c121b80cdad8e4bd6a1fcd05cda94ffe465

  • Size

    164KB

  • MD5

    2f2f7053df2ca26864721f03caef0980

  • SHA1

    7e678fd598286fd9043be72ad261078b7f4e8db0

  • SHA256

    29ff7f2dc5e08679845d5a4e1b848c121b80cdad8e4bd6a1fcd05cda94ffe465

  • SHA512

    260729378ea715a9e755827f6bdb030b0bd7c55767c0de1dd0b9b5b95ee737fe226a0762a13ad2d38a4a90a593f7efa7c969c5c020718af9b4223069d0b88812

  • SSDEEP

    3072:dNQKPWDyUI0iJltZrpRXyy4mcQkmqJtNkIkQJN++2CYpHnOE:dNSDyUItthp9bcQkFki++

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2