Extracted

• • Target

    bbb6944dff405b006ec02192340394b62c770359862732f79e995ffc8040f27d

  • Size

    114KB

  • MD5

    36c27da674d0bb9484c6a7f479063645

  • SHA1

    b8562f952d11c7bc802d4e4357a6b61d053a915b

  • SHA256

    bbb6944dff405b006ec02192340394b62c770359862732f79e995ffc8040f27d

  • SHA512

    7b514c946c679e089e51127f657e719800fb5cae72c81e455690d3d4995fbef2f7fccd1c7a3eae76af153dbc14f9ff2860b0a49566ef583e55fd1085e9ae5785

  • SSDEEP

    3072:nYbBsJPGOL8zlmdbTA+RZQxYpsOGhSZgugHziZoe:nACRGOLx3HRZQepsVog9HGZoe

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2