Extracted

• • Target

    2024-05-30_9cdcb0b11d63bdcc2e74a82fe2c0c8f5_magniber

  • Size

    4.0MB

  • MD5

    9cdcb0b11d63bdcc2e74a82fe2c0c8f5

  • SHA1

    24cd66ab3204c7691d1e06acc30d8234950574a7

  • SHA256

    51c63d55952c2d5629589aba0fa5651e0d29797a995a4c9a99cf580fcf77c7ed

  • SHA512

    b7c3dc0c81d02afa62c53ff62aa8736107619d601d9b93ef7a0545048f4b9790a81e1454660ee5aceba117aa18c65659a3ec33389f69bb1e9ebd8b42ce8173d3

  • SSDEEP

    98304:6g7r9SdkzoeUCY0gEGvxgYHnx97cw4lFksSirQNesKP:NYYaGP

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2