Extracted

• • Target

    f3ba8d1f1a67d4902cf9a8f33a40e1672bb25bee3e48958a3aa92131495f9b02

  • Size

    749KB

  • MD5

    5a25bf3aa9f7926fb1abb6698b3e8f40

  • SHA1

    c3a4aaa91289b54e54365efce55fd8e28ca495f3

  • SHA256

    f3ba8d1f1a67d4902cf9a8f33a40e1672bb25bee3e48958a3aa92131495f9b02

  • SHA512

    8e5b4be0b50fd800e923c00f63fbc8a2bf7beb476839d5556814246fe410f467e18c441f682107db06843893a409f7f3fa0ab8124c3d07f83091f5ad999ce7f8

  • SSDEEP

    12288:B38rfCRxtKEKMI9thjkkALnTxas/pexDu+CVkPPANBYWwKTWUmO:RRDOvhj7ALTcsgDu+CsPWlTD

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2