Extracted

• • Target

    54cb3527ae0483fb88696506854cfd00N.exe

  • Size

    65KB

  • MD5

    54cb3527ae0483fb88696506854cfd00

  • SHA1

    f28774611e96e1437cc5d9feabc0945093be5c81

  • SHA256

    c2f77825f782d44833d338654159c489788398f0648445eaebb2df2204a6a7ab

  • SHA512

    255b6fc425b8c9eb3f7fe8f323276941d7d875874496610f3d3194712f2b1e784d127247761a6b70cf2489f60312334a61810a546c3ee1c3cb71c918f0125a60

  • SSDEEP

    1536:YoJyFnRr6LrWQ5wdT3k9urU5weuVWdBiWqH6RE/ns6h2Zzp:YoJ+nRWfC3k9uUXuw+WTRE/s6Cp

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2