Extracted

• • Target

    7f6bf89a6a23a501ee708f9a3a6adc282cc420ea97b8256fab21ecf006ddd43d

  • Size

    380KB

  • MD5

    0e3ec8209e255fe2fe41a645c56fc810

  • SHA1

    0d32b8ec3922cde3f6e306a023c8e2f0ac464032

  • SHA256

    7f6bf89a6a23a501ee708f9a3a6adc282cc420ea97b8256fab21ecf006ddd43d

  • SHA512

    cb3f84e89d7c0464c89e94c87dd57ada5ecdb873367c10c423f444294ecc915d600e882f15c1580019a3e2c81dfd3160b09c7668f29cf3898f71bd85c3e5c2a2

  • SSDEEP

    6144:/bB8IHeMQmwhIWPrjAlZbXJsPAzCi7/isDpWlbZAG++KCRvN:/thHeMQvZPrgZbWCCi7V1Wl1AG/KCRF

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2