Extracted

• • Target

    05b18aefe30b02726ddb403ca718412ea3b818d933b41368eb69980fbbc295a9

  • Size

    144KB

  • MD5

    660cd0421035f021ed80770b5bcb28ce

  • SHA1

    2ea59151117eba2468dbcfb94267036d33ae0a63

  • SHA256

    05b18aefe30b02726ddb403ca718412ea3b818d933b41368eb69980fbbc295a9

  • SHA512

    ab5345f262faf27757ad757787af74c8a71ac56aeb3a67f2f2d6ddeff2205720833eb7aa5728b1eb7c8f8e8963b318a3709090600406422cd1d20d4952e04f05

  • SSDEEP

    3072:CNQKPWDyvI01JltZrpR328G8awj83LjpV3bVRkEHZP:CNSDyvIathpq8azf/3ZhZP

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2