Extracted

• • Target

    abd3f4c5d80174b5420638e5a4791183b1b92b690f264c2d89cc0da9e2728f27

  • Size

    168KB

  • MD5

    002ce4ab8fb70f616f1e7c8845cdfb3c

  • SHA1

    d2c6413029df4852c106dadcd6c50f8041485508

  • SHA256

    abd3f4c5d80174b5420638e5a4791183b1b92b690f264c2d89cc0da9e2728f27

  • SHA512

    b7e062e46f10eee0241b56e4fb335438e8cf81c10704d7b46ecf4fa5fb370ef8e2507cc7550d513d79af17759c37ec7ea301ccd81d35abf23894abc29c65dc4c

  • SSDEEP

    3072:eb70Y1nWWpaxehi0z9oU4rEJZasrotrUeQhdcwcLn:enCeE0z+rEJZetrUXdchLn

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2