Extracted

• • Target

    e5fd61d74458a61275489371f1e1fb1fd05395ef8db7bc6ed3e5105e971eec3a

  • Size

    580KB

  • MD5

    5902f9f74d290c311fec6076ef81d230

  • SHA1

    92084be0c57711b5fd54e8f3976ec35cf3e6d940

  • SHA256

    e5fd61d74458a61275489371f1e1fb1fd05395ef8db7bc6ed3e5105e971eec3a

  • SHA512

    4f7f0ba36ee829ca13a17e7c9ab86dd830e73375a39d0306ae4220d7324c7fc08b44b6b40294845bdddc9721bfa660a2aa72623d279c9799d0a9d81bd6a33ff2

  • SSDEEP

    12288:S/TXPzflNR+cO3ujMbRT70d+23c+uPFpPy/rS8m7CxX/d:sDPzbRuHRv0d+23cr9EGWvd

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2