Extracted

• • Target

    e5914b5a5262653f02feda69477fd219d64c62b525e8e14dc0a466f19c0e1ea9

  • Size

    164KB

  • MD5

    0975e2a9007193301e443ec5d2066050

  • SHA1

    e52e4af30f8e9efc6397ad20325b5c1ac53ee594

  • SHA256

    e5914b5a5262653f02feda69477fd219d64c62b525e8e14dc0a466f19c0e1ea9

  • SHA512

    558fd046aeb5534daa7f84e966078e185129192991ba54e500dff421f9662ca60b38ee44bb9affa660562e4288901e59604bf8c84869da90bb736ccdfe153ebf

  • SSDEEP

    3072:mNQKPWDyNI0hJltZrpRRylhuUEA0LzCxwVwm2cSNz:mNSDyNISthpwK/OwVKcKz

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2