Extracted

• • Target

    c65d69e612522c6bedd133cfcec323b3b7076b506bc664143f24cd3f979de94a

  • Size

    189KB

  • MD5

    6976277e1600cd91603714dbdfa92591

  • SHA1

    732576046b049fd4a7093366894d3efd7fd33ab1

  • SHA256

    c65d69e612522c6bedd133cfcec323b3b7076b506bc664143f24cd3f979de94a

  • SHA512

    353717a09765e4dc49d4bb1d5c30b1d9b1df953a81dd009c047dce3085bd143ae6dbdf1309c801ab86f74e196f2fc9c1d88c7cb0381259d6218ebc86c34e8b54

  • SSDEEP

    3072:FVm5jdZp1JeR07lfaytvSGRuo0vsxAJec6oMclbv7JLtRjAFxqlZUJtbMoIBZtko:FojdZp1JeR07lf7tvSfofI9RblAu3ct6

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2