Extracted

• • Target

    dc08623feaad1a9b35e304d916f3795964652d9b0577f538cb68f3dcc369c3a5

  • Size

    97KB

  • MD5

    d47b961d35126324b97059dcf6de7cbb

  • SHA1

    91ff8c114ae591716ed88eb3b1f0c5ea91dcb38a

  • SHA256

    dc08623feaad1a9b35e304d916f3795964652d9b0577f538cb68f3dcc369c3a5

  • SHA512

    7fb0d63e9f201de181a24ad94add31bb51a923cdc33fd4fdacf636fd173c0ecf39801c29d1b26abd76dd4268301db1ab4267b1ccb95392174a3d93dc99568125

  • SSDEEP

    1536:IHtZqw1iiniMrAdYtpIVzeUu4GuJgzvggNMTL1pQX+G9b2w0etoFOxrj+x6ITdgr:qqw8iiMr7MVk4CYYQm+ctoFOxtIOfC

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2