Extracted

• • Target

    30e180f39265d5cffe00a98bfab0e810c1355867aca246c54aad2b8b5a577e47

  • Size

    97KB

  • MD5

    aafa45e8f0d6b7f782f6e31c83abd130

  • SHA1

    cdc2b48358b3b0b6466684ddf5338cd48a8bae9d

  • SHA256

    30e180f39265d5cffe00a98bfab0e810c1355867aca246c54aad2b8b5a577e47

  • SHA512

    66b0f07c9a4598130ffb11e34cb9869a54beecd1922f31d6261ab7e75905c20c1360b35f77e50c8dd6b7d0b123ebacecd5b1e97cd2153dccae9b128ec1610a55

  • SSDEEP

    3072:fD0UmBMRHzlaSVM/G5EUsZWIFQZeosFQc60ixlu3S:fD0qVRry/G5DuWIqZds1L

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2