Extracted

• • Target

    7baabbc0caeafceb17f651bf792fd1a4

  • Size

    79KB

  • MD5

    7baabbc0caeafceb17f651bf792fd1a4

  • SHA1

    44057db2042e907b1cc3828110946e4fb39dfa10

  • SHA256

    331b7a17662f7dbdaf7798baf206250e42a4a8838d19f97a8394cdccc94cbc4f

  • SHA512

    0107a2ce302792d44f449b18e925cdc90f58baf10878b2c019725a3123866732f8e038921a1df024ea539e48c705ab36cb3289aff1ad5c4c6b52fe213386ceb9

  • SSDEEP

    1536:j10iR+9xLMn1a2rRhTbvtwTIryG+ZoK81CHuiPKx21xh:WiR+DM1frXTbvPuGpkOiSx6

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2