Extracted

• • Target

    8627ba1c2774dc7215fb5173b16ab308de91c969114cce7d672578a5c25b7c7d

  • Size

    163KB

  • MD5

    a028cdc678dc0f8209e05236b1a1f1f4

  • SHA1

    1f64a9bf20f6db876abd7cdbccfff8b6b46b8d3d

  • SHA256

    8627ba1c2774dc7215fb5173b16ab308de91c969114cce7d672578a5c25b7c7d

  • SHA512

    0079372e6b86699753e521bd262d334c4569277212c4213638a3d7fb2127c6f8516224f4a4cf07e692bd02f230413fdbe25dc012a2446380b3c92f5028bc292b

  • SSDEEP

    3072:tqNQKPWDyyPnfVJltZrpR0V3vU+If6TPoHr0Md:tqNSDyyPf1thp4Ifjrh

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2