Extracted

• • Target

    774d05f3837d034f08ed33cc4260724c8d929b747d6392613ff9a2096de746f7

  • Size

    65KB

  • MD5

    112954bcff40d3f5b80ebe4efd7a93cd

  • SHA1

    ae5d5cee954da9396f220b13e01641b641169f2c

  • SHA256

    774d05f3837d034f08ed33cc4260724c8d929b747d6392613ff9a2096de746f7

  • SHA512

    b23d287060b98d3dc18e7a7f375132810a69ee26935f9d86a26bbfe9a15def52ae372a6c65eb6762f251cf32ab55bd736b520ce9bc5efe003ae849c6243e29b5

  • SSDEEP

    1536:18vqsnWV8Df3PXsqHbnkW7xG5sdg0utbaWgqHlz7AnlxqnyDZccGsrRee:18ij8D3F51QslulbgwFAlx88B1

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2