Extracted

• • Target

    46705d3a3a0b0a203cebcc8907b6e0cd81e43f176d3e43d4972fb6c573ab5562

  • Size

    933KB

  • MD5

    62990dc3745346ce486512979f142790

  • SHA1

    ba5b7858cccae1dd7eb335112320e1f9bd6da932

  • SHA256

    46705d3a3a0b0a203cebcc8907b6e0cd81e43f176d3e43d4972fb6c573ab5562

  • SHA512

    8a8697a8942a9794cac56567694d5a7d429c5087953d29c3ed09014fdc1b058602a14ddbf1687efae217d6dfc33292acaefd202eebc5bad94171de83770107f1

  • SSDEEP

    24576:f2ylOKkpvjg3igQeVyVDhQ6s43xNfv0QGp/uy:ey4pLg3pHkDm6NxNfcQoWy

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2