Extracted

• • Target

    96071311916585ab842456752a59258acbe5021cef7a85c7514bcc0d33db72e7

  • Size

    215KB

  • MD5

    32176c1d6d9d2e4308d55ee0148ab505

  • SHA1

    22f95e323a58dd871b3c9246a7cee3354843bc5e

  • SHA256

    96071311916585ab842456752a59258acbe5021cef7a85c7514bcc0d33db72e7

  • SHA512

    87580f7dafb845cf5a5a4a7faa9993a41f2bd2d08f1f671bae121573ae8f859e2daee465596dcf9ef735fc6c7f9625ad1aed7356e24e2190ce4f205026c83828

  • SSDEEP

    6144:br6kevYaqmRXt8EPWn0N6ijSOgcb69GsXO4+zyq4Gt:fuYfmVCCW0+lcb69Gs+XB4q

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2