Extracted

• • Target

    8c58e89c7846424e0caa09dc671309bb8f6baab978297d077081349e2c4769bb

  • Size

    180KB

  • MD5

    3a066f0bc894983a255ed9e1a07921f5

  • SHA1

    de1b4b8aaf7d274c6ddd8b7720a3c20f51b10aae

  • SHA256

    8c58e89c7846424e0caa09dc671309bb8f6baab978297d077081349e2c4769bb

  • SHA512

    41eeaf055074aad11ea205be0ecc52874e2ba191b5716e8517403a40e134effe5627b6b149bb9cfcdbdc6261596f3c8561906eaff5a80a64db509d65acd0e1c0

  • SSDEEP

    3072:fIdkMa8usOxTBI/j6/aBI8uiSiZjGqcDwqS8T3L40CVgTds+g2TFYm20+Mr6lrf:1cAu2CBI8uR0GS0E7WGUYm2aArf

  Score

  10^/10

  ramnitsalitybackdoorbankerevasionspywarestealertrojanupxworm

  • Modifies firewall policy service

    evasion

  • Ramnit

    Ramnit is a versatile family that holds viruses, worms, and Trojans.

    trojanspywarestealerwormbankerramnit

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2