Extracted

• • Target

    0d9bfd1574e6c15d2143460316eba095c78904b932cb5a020ebad0de99912858

  • Size

    217KB

  • MD5

    67521c9c4506e4c5a4b2a7f054d8cd5e

  • SHA1

    977fff425036425a97d4d1c51fe04c04a3b560df

  • SHA256

    0d9bfd1574e6c15d2143460316eba095c78904b932cb5a020ebad0de99912858

  • SHA512

    44743ee392586b91956d052d9ffc37eb5976da43e753d8e061cae4912b37e15e4574d9a6ba9afc5507331333af81c682fcae8db8c93a35bd19860082e5867a00

  • SSDEEP

    3072:NYgJesBiCyxyvZcMO/6T4nIB5BAZlt5lCHPK84bHErQ7DtoAeOaMsET4:75BuAZcR/6TkINwlCCdQQ6S

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2