Extracted

• • Target

    50468b4000dae12f635fc640a91d370d6abcf46287cbfa0d2a4cbc9a72af8ab6

  • Size

    220KB

  • MD5

    51f7c77020fdcdde7ddb9eeeb697b185

  • SHA1

    1040cc61fd998baa9e4e94b8de4804fc44e89aaa

  • SHA256

    50468b4000dae12f635fc640a91d370d6abcf46287cbfa0d2a4cbc9a72af8ab6

  • SHA512

    3fc611f9df53ef07d9745c37b3c0d06249d5e6994830b8f79eda47332bf80bc9127a378817780c20ce5d690cea98fdc541ca79982d8a1f96729dce615bbf4d14

  • SSDEEP

    3072:pNcF+i4uhMepnmqqnsZdysdJzTFrgZM1Mb1kq5rAv54Q14ZfJL3z2ukkpG:TcFfhMepgntsdHMZMKsv54Q14BJ/nG

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2