Extracted

• • Target

    76060be8c6321d2ba710bc23f90d2861e80c6578f6ce0802f45e22c1c0fff1ae

  • Size

    2.0MB

  • MD5

    df65df01fac65178e1f37d1a41aeee29

  • SHA1

    529e1ba0b4002c4a823f36e94cd7f005f350de46

  • SHA256

    76060be8c6321d2ba710bc23f90d2861e80c6578f6ce0802f45e22c1c0fff1ae

  • SHA512

    fbd7fd2ba54b8ea952582179f20ad8003d820d2a9670938cf34736f485d29400ed9088132423734d4456ef8122fd02dd7c266e3709ab2ea671cc83e585f95db4

  • SSDEEP

    49152:Yuri2899OM/gSY8wHTsb+92hnHO6xfV6vq7NrpOPfgLs1OADgMRM:Yuri79jgSY3Two2hHXxL7NrpjH

  Score

  10^/10

  salitybackdoordiscoveryupxevasiontrojan

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2