Extracted

• • Target

    5f39c65e18e06abe527d1fbf7b0c27a608f650d76104faaa0c5308d619830283

  • Size

    185KB

  • MD5

    258be04f4115ef15ff1750d7010432c0

  • SHA1

    60e26673b70d4e351fe9bac0ed3b053f2c2a0664

  • SHA256

    5f39c65e18e06abe527d1fbf7b0c27a608f650d76104faaa0c5308d619830283

  • SHA512

    065868ebec54b5167338c14c77de1e7d3e52df3817fce9d4521ada909894e9f79e95528d4c1355614b9cb6f4943716e4a76fbeea33a306dfa47d863a99e393b2

  • SSDEEP

    3072:CFYgJesZiWyxyvZcMO/6T4nIB5BAZlqRnXmtsOj8wLglhwZRn9biH400:Cj5ZyAZcR/6TkINwlwnXmtj2wR9biX0

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2