Extracted

• • Target

    5ef46f3d0ffb814dce72a74bf3becc201ce8c396d0c43e398294c650cb74b8eb

  • Size

    922KB

  • MD5

    83ae965c9c257f8a81e70d76ff6be500

  • SHA1

    87115d8bf274e56e577bcb2eeba9f96fb16f271d

  • SHA256

    5ef46f3d0ffb814dce72a74bf3becc201ce8c396d0c43e398294c650cb74b8eb

  • SHA512

    05592dbfa4a945147a6fef5ab9159048060ce01860d519e5ec2ae1f41cd72764ad3f6150768773f752c04a617f12afba6c33c14605e8ab1dae14bc9682f1d922

  • SSDEEP

    24576:6Mz2+vNN3i4f7C79fmVpbxNIWuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuIuuuus:pzzi4m79feduuuuuuuuuuuuuuuuuuuu6

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2