Extracted

• • Target

    0e778602de662fec50eade81e261275a5cce85cc11fcf419dab3e98a294e1fef

  • Size

    460KB

  • MD5

    168ab8ea8b0479e91f2ebc7515289990

  • SHA1

    93d7e9d480af49c57b7593cd2156044fac111052

  • SHA256

    0e778602de662fec50eade81e261275a5cce85cc11fcf419dab3e98a294e1fef

  • SHA512

    e91ce623b5a00e6eef3590f1c60b12328149aa804c3714ff3768ee244576fc8505fde7b0cf9a7bb5cffdaaa0ebdc2fafd7bbbfbec50933ebcda70f79158421f0

  • SSDEEP

    6144:MtgctaRXboDq68pGn3UC68rVFZ9k7A4G+wiFsbV80rPT1pU:MKc+o9dnEC68rVFTk7m0s6sr1m

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2