Extracted

• • Target

    3e8e7468b68cc1d802b2cbd47b77166afb8c2487c46c58f347a3c018716ad5ed

  • Size

    1.1MB

  • MD5

    4d8f47824f0f40d82205cc5217bff630

  • SHA1

    12253f9b7f71aad4917db05a30706454c64b13d3

  • SHA256

    3e8e7468b68cc1d802b2cbd47b77166afb8c2487c46c58f347a3c018716ad5ed

  • SHA512

    4e2e7bfb97ab560ceb9ef3d666d8727c54990aaa892ae590fd081a48059c98bc5180b3f81f00f61ee0be31f0fb7f56a064fe5e2fd6aef9342d725ef3590ffde6

  • SSDEEP

    24576:TH4N+5oLL0F3sEIcKBJK8BpYyhGsOa/IDQyxUM8a2eZj4hQG9FZ:TH4N3UFxIPA8ByyhTwM/M/XZ0ik

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2