Extracted

• • Target

    dabfac957bb75f6ef1e2ddf410ab919a109d7e9d4174b6dc30b0635b46917671

  • Size

    258KB

  • MD5

    80190a3dda41ecdef99dfb8f1c4382af

  • SHA1

    22d4597d2426cba810be3bc96a229c10d38fcd45

  • SHA256

    dabfac957bb75f6ef1e2ddf410ab919a109d7e9d4174b6dc30b0635b46917671

  • SHA512

    1a88a1c0f90091ab2c6785738e63d19c706f1aba8c7d0400b2d4100ad67cbdb3fede900692effcb506cab1ddc7e34fb87bf7cafb1cf93d59fe3cc99305d24695

  • SSDEEP

    6144:oTt/t72XtcLvmssPOLkweQ9epXN1YRxFE3eI3KD8Uae:m/t7ussPOiQ9epoR/XI3K9

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2