Extracted

• • Target

    64c6d89ef5ce90db2ae6ad52998252da70de429628a701467c54638117def812

  • Size

    164KB

  • MD5

    0c32c2dec75fc8c5d56c83c31b090a81

  • SHA1

    0ccf53af930920ea4c888c814af97fbfb30efc03

  • SHA256

    64c6d89ef5ce90db2ae6ad52998252da70de429628a701467c54638117def812

  • SHA512

    59ecb0c66674593ace69f54c6009edfbd70f741e60be7aa0f540f0d8fddfba5ea77a2b56d00cf22748c6117008013213bc35a1b2fb16bcf9617a63d533869f33

  • SSDEEP

    3072:DNQKPWDy3I0hJltZrpRRyBvAcDE8dJJBQWryGJqJ75ubyoWnDDr:DNSDy3ISthpk9E8zvtyGm1ubYvr

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2