Extracted

• • Target

    5b1f3b0c608248195c8fbd055b945c6fa37f6888c7bd2b751b58b680fee35b2e

  • Size

    92KB

  • MD5

    020cb4b83905834cffbc5a8dcc825607

  • SHA1

    a79c1a29391a14df2b2ce724b7f7e0fbb97d8841

  • SHA256

    5b1f3b0c608248195c8fbd055b945c6fa37f6888c7bd2b751b58b680fee35b2e

  • SHA512

    8aa31c69e6d7094fdd1295f13eed7c9760ff9af84ca4fb2a6e45bbcf89557ff0049c8afbbda11f9e2a8c8d55f0ad2c43678d7baa324285a06b14505435cc32c6

  • SSDEEP

    1536:o4l0S1pf9Zz1oGdyuf2fQJYW9trP5PsXpj+zKDb2iSDjaobroFQ1oL3cMVb/D:os0+PoweW9tb5PsZjJS/pn4YoL3cMtD

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2