Extracted

• • Target

    2061ae716311a8fcaad92de82854faea07f060c213b414cee88ad8003300a9a6

  • Size

    1.2MB

  • MD5

    0f4dbbd12cbb21650ddd494687ef4fc0

  • SHA1

    874944d0bc0a96b179798472223a0913b7e0946c

  • SHA256

    2061ae716311a8fcaad92de82854faea07f060c213b414cee88ad8003300a9a6

  • SHA512

    566b5e58cf7b1fcef611ec0b8b73015e01f8a94bf653fc2e13b7a5f2faaa86986f39309c0c022a938d7a39c3cf03ddd6a8bd0e8ae4b619ce909f4a1345bff56a

  • SSDEEP

    3072:g4KLVfykOSaz8ceGcpQcf9nLzrDh5m0FkWI7bGmxMGft6DJlmMn:g4KLhOpYcexFln/Pm0q17bG8lMD

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2