Extracted

• • Target

    d29cc9d503aa738fefea8b26a885933e7d06e25704e20387a2b1284b7e5caa1b

  • Size

    588KB

  • MD5

    22bfc036881d1fb42bef2827359741a0

  • SHA1

    514b2b6071afb7cc82870360c572c8bd5ece67fd

  • SHA256

    d29cc9d503aa738fefea8b26a885933e7d06e25704e20387a2b1284b7e5caa1b

  • SHA512

    aaebc0bb545c55b424b0236caec2613c70e3f2a95f7094d1c0a21db0306817786a9950ee09d0f8e6493bc174d079847cddff7deb5d375030b4acb29983405557

  • SSDEEP

    6144:kjjkLmzA8F0UQLfwXI5bqhSN5L2vRq/NYB215mPX7zSZwp/5s6lE/4Eg:uI6z0OIYhmObwMPX7GK1gRg

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2