Extracted

• • Target

    b67419393ce91976b8d545d305045db7bef215d876d704bdd5ea5f606bf847a5

  • Size

    656KB

  • MD5

    54f2aacb9fb8dff227d2adf5204012ee

  • SHA1

    2031a8102718a82f96b2fd3cc7c168dc2d764c06

  • SHA256

    b67419393ce91976b8d545d305045db7bef215d876d704bdd5ea5f606bf847a5

  • SHA512

    67a2e177523f78ad34f0895ccf7e0185f779be1605a54978d1687234aa49ccd1a594a734dfc2a78174726373046ab8c3a51be34c54e41955521f62faa4043b3e

  • SSDEEP

    12288:z/W72HKq+w07BTQoPo+N+E5cvR9joSr+IottPbYCYFp:ClqB07k7E5WR9JzottPb+p

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2