Extracted

• • Target

    515e2a976976258de5ea9c564f8ce5fb8475b57d15d7dfd6c978c0a54ea07f05

  • Size

    103KB

  • MD5

    a39a941652f4ff0dff5ad20ad9ab1050

  • SHA1

    d27e962d0d5c2752d5642fe5399a054080580947

  • SHA256

    515e2a976976258de5ea9c564f8ce5fb8475b57d15d7dfd6c978c0a54ea07f05

  • SHA512

    f116e98d6fa84d1cb84051fca1ad9cbea0d47aa96b440a47e86f5f3222e6a55f10f63db26635c8f42b1f8dafeeff9b29b534585973b7ee40e37324ae34ff3a6a

  • SSDEEP

    3072:r3K3J/jOYqL5KxZAeaTiCNPS886yfXSI6Sp4GfJ:UJ/jOY8ofaTZql6yvS/HGfJ

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2