Extracted

• • Target

    e0614ad1710607adf8cdb62d45c15e95b1e19e895c391e3f2d1e20f47037452b

  • Size

    137KB

  • MD5

    2bae4b414dc1207afb62d5aef2e06ae3

  • SHA1

    630bf52862c56aa20b3eaf9c056e57a9dd887ab2

  • SHA256

    e0614ad1710607adf8cdb62d45c15e95b1e19e895c391e3f2d1e20f47037452b

  • SHA512

    143f7c2f7a218a2b3f42e1bc5015e97c2e952d3792f1fd0965071bd3e7c29a690c29a5fc84c45dcd9fb149669fc716c8381b819f7526710773e91e8921f31e59

  • SSDEEP

    3072:9y2AdZSA3VOOlHPvrYLBT8zqE9r9ybrSEsUwq75:9y2AdZSUVOoH7oBTamN5

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2