Extracted

• • Target

    df3f4fe036287c07894616c104bef03c

  • Size

    100KB

  • MD5

    df3f4fe036287c07894616c104bef03c

  • SHA1

    aecd345398a3be2d2cb226b3f83c3e7d96c3699e

  • SHA256

    181ef9c5bbfbd0f69c761c5d3272396fe2921f7fd816b6765b777e20b726720a

  • SHA512

    64858d5969badfcbc44a8dc4007fd74f98b86a24513ecc3ed0fdc7d142d94d20fe3b2d4e980587072d4b9ea94d88a4b8978ddce98f962a23ca0b6c80475537c2

  • SSDEEP

    3072:hW5ADIxrW3eXKEv6CwdTkFPVdtWEomSeHL7eekvx:E+UxrWOaDJdTYdtz5SeHmekvx

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2