Extracted

• • Target

    88d8f429bcb740ab3eb60d8690cd70aea893f47a358273c473c69a1513e00aee

  • Size

    526KB

  • MD5

    6122eda792a6ca7affee7bb59503ad53

  • SHA1

    92695b415a15c4a35cc76bc8c32ad3eb161c94e8

  • SHA256

    88d8f429bcb740ab3eb60d8690cd70aea893f47a358273c473c69a1513e00aee

  • SHA512

    06e5b91474168df7be7789b8a7dda63440820f3601c5703e8f09d502978f8ba1f7da204b48aa5c3ce508b9d298d5070ba3e56fa546ac5d3fa28aa1fc0982a8c9

  • SSDEEP

    12288:3BzKc/5721VghlVP1TlQEW5XvzjgqeHsUO:3VKc/5721ValVdYXvzjOHQ

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2