Extracted

• • Target

    ced448efeecf98bf91f54c12d4739e30f8fb318340aebac84222cb32059af4ac

  • Size

    499KB

  • MD5

    52398069e2fa6b2eb61a8e23023ca331

  • SHA1

    dde390069c6876ecc225ee000a165353e18eaf2a

  • SHA256

    ced448efeecf98bf91f54c12d4739e30f8fb318340aebac84222cb32059af4ac

  • SHA512

    07771263fc07a9f58d7c6dfe3986bc8e6d6c1b5b3f21a713cf5dc3c4c749e61ed8f730c31ac4c212e1634ee5b2f727f2a5b11021f466b703ad97f730ae448e08

  • SSDEEP

    12288:VRJQIUdAnEHBdA3ImbN8t7z/Tf/CL/Opv:YAEDA3ImZ8tf/TfY2pv

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2