Extracted

• • Target

    9e761161f561057bbe23fd107f97f3795c34f14b445a1e9a5ae3d0432d726b80

  • Size

    193KB

  • MD5

    48f7424d9c57379f6f6b2ce284d7387a

  • SHA1

    2ee05014aeea758cd4da313d5ee9fdd656926c0c

  • SHA256

    9e761161f561057bbe23fd107f97f3795c34f14b445a1e9a5ae3d0432d726b80

  • SHA512

    2d2ae19042fdd60aa9d17cf0dbc708671ab02ce0958ebb2bc562040f5a546285c2a1570d35d82b641d87e7624a7c6344f75d35a9513a3bd0b0f9a327653ccb92

  • SSDEEP

    6144:KT5HiUyJU49pN767JNkzqnh+mEBFOAFRkL/k:KTRiUyJU49pNGhUmoOJk

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2