Extracted

• • Target

    6fb1e8c8c2d796bd2891bc808ca3c26fe4311cd7ff25ca0ab2201cc8c44182b2

  • Size

    517KB

  • MD5

    0e73317e90bd77222818e51bc6a8bd70

  • SHA1

    33688483b9f3aa154103255ec38d8f449e06a1e6

  • SHA256

    6fb1e8c8c2d796bd2891bc808ca3c26fe4311cd7ff25ca0ab2201cc8c44182b2

  • SHA512

    e10055c8898d840b451dfa8c47c6cf34c4c4c195d1238801a620952efa184d26667955c19453437faf44f529284e33e9a512ac08434da44483f2747f7ba9e4a6

  • SSDEEP

    12288:mohjbbHOY5c9CsDrgMLi4uf8TSel8TtkW:moh/bHOY5c9CsHPuJ

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2