Extracted

• • Target

    4a8af8969741f2cc2a3e6ea826bb793cc01022df3b64d2b326532dd311e81433

  • Size

    966KB

  • MD5

    5dd99fc94f14cf4c9cd7579a45f74840

  • SHA1

    bd22b443dbfd787c72b1e38bed54e0082abde72f

  • SHA256

    4a8af8969741f2cc2a3e6ea826bb793cc01022df3b64d2b326532dd311e81433

  • SHA512

    fd08b452d1105091a236ffd6054a888d491ad3a06f2459e2214dddfa8263f1d007c7f06690955e78293db576bb9d0b747322f82c36fd88c40a0549edc04f3efc

  • SSDEEP

    24576:XEOkNzbZrPC37HzH1A6/flFCXVoEluUMJdDExlaZkWm:Xv8rPC37HzH1A6/CJuUTcFm

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2