Extracted

• • Target

    2c6c8a346aa142f328a7bd45303430c4d53e2bfb739ce9a91e39356240b89579

  • Size

    255KB

  • MD5

    18bd4e5e473d4c2cb6957ec388d13733

  • SHA1

    2833787d0231b77f6a0e1bc87992af2787422fbb

  • SHA256

    2c6c8a346aa142f328a7bd45303430c4d53e2bfb739ce9a91e39356240b89579

  • SHA512

    d6f1d609a434cb5173638a0cc756e051849c3bc950e413403505d253e36a4b69f4b6e7978b913609053d8d5b4a97e1065b03fc2324995a19f06c54efd199d4e3

  • SSDEEP

    3072:7Rxn3k0CdM1vabyzJYWqQa2xVg9p6ajZSGFMwr+C4bkpxs:7RJ0LS6VCVMZSGo3kpxs

  Score

  10^/10

  ramnitsalitybackdoorbankerevasionspywarestealertrojanupxworm

  • Modifies firewall policy service

    evasion

  • Ramnit

    Ramnit is a versatile family that holds viruses, worms, and Trojans.

    trojanspywarestealerwormbankerramnit

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2