Extracted

• • Target

    b9591c386347bdcb93039fcaab5939a50e8b037aa8b0968cb5792e687bfcdb3b

  • Size

    118KB

  • MD5

    d936209dd69ccf4bef9a64105c5898b0

  • SHA1

    e4ad65f213c11e1caeebd1f526f39602625fd6c8

  • SHA256

    b9591c386347bdcb93039fcaab5939a50e8b037aa8b0968cb5792e687bfcdb3b

  • SHA512

    78f20ced303199acab7131137b003a04dd851937c6a8dc050fbeca9f18635858b59e8624cc087fa09946d6525493eee046f4b13e1cb80e95f35c13f49de24a38

  • SSDEEP

    1536:KVJe4VTlrj15ZWlQrsrFrbcnNvYJTQK8h9jZYfdG0V1yCQbLNpe:OVIlJx4naJT+h9jSdd6XbW

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan
  behavioral1behavioral2