Extracted

• • Target

    fe2f7fa6b16218c039a0a8e1bf7e3750N.exe

  • Size

    97KB

  • MD5

    fe2f7fa6b16218c039a0a8e1bf7e3750

  • SHA1

    090c276af74539619fc10c52bc214b48aa2394c9

  • SHA256

    af2cba7e1590c3680b2958fe1664572f89dfb2173275da15e8a2a6adfe902372

  • SHA512

    7a24e2f9e4d817ee14863ef710e44c1a754bc72c3e0720e2879feea556c9cf9eb9f43200c53dd4baf2e0c21ad7686b520435e2c36628aa40ca1abb4ba151baaa

  • SSDEEP

    1536:vw98gtx1fQjq/j6wS4Yol7B1YCt73bunEJAX5qMzV9C3SdAEtrLD:vG8gz1ojqr6Y7L7qn75/Z9C3KfrL

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2