Extracted

• • Target

    3ff9edce05b6a691161ec5c3e48e837541ddcadcb10f3bbe33907dae7961895c

  • Size

    3.2MB

  • MD5

    27fafa2f27dcedb80dd4948fc4b5499e

  • SHA1

    085080ad147b6644b386f23d45fe2d635e531c50

  • SHA256

    3ff9edce05b6a691161ec5c3e48e837541ddcadcb10f3bbe33907dae7961895c

  • SHA512

    48ede5e94710619165f06bd68bbab5e16056cd8d82f71bc0f2ff16957b7650b8548101e9d80f2c7ab3bd06de49bc8df6fcf284915c14b18ddf002920997b9854

  • SSDEEP

    49152:Sh4kCwCFm41DlSdlggggM9N88C4KaY7NNT+Rcb26Z2qZKP/h1vONxVzP8zDA4Pos:Slp41DlGKv7KLWcbBZPghlONxVze1

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2