Extracted

• • Target

    408d1ed8324a69d0df524138ff968f70N.exe

  • Size

    65KB

  • MD5

    408d1ed8324a69d0df524138ff968f70

  • SHA1

    1239020bbec503ab65fdd06c70a26d15c0dd213f

  • SHA256

    a3c9aef35a4f5e86081648697f62f658a2a98cf677b01feeaf079e5180330fb9

  • SHA512

    d703c88bedc999ce5bebfa265608e1b5050cea04b38c15c8e3761c878919c872b75dd6ff44f8fad96490d90d3cef03ff751ea2788b4d95a98d659e27b7e5ffbf

  • SSDEEP

    1536:LqwnPRBmJvK7QaYUORp+FlnKnS00bU4rpovPsETqdCC2t:LqwPoeBqXaKH1vXT9C2t

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2