Extracted

• • Target

    2024-08-22_9d1e485e3fd85f93936bbedae02201bc_bkransomware

  • Size

    520KB

  • MD5

    9d1e485e3fd85f93936bbedae02201bc

  • SHA1

    9c6152b1a6d428069ddec27f52aea3349063602d

  • SHA256

    f7f102b26a3b759a58797b72c1bbb47c2d1c4a3d2212c4d4478f794801eecb19

  • SHA512

    7aed36865f4b60fb89535d30b99f92ff0989bef0e3b9f04a4e975b7a20c762b1253bdbe4e8a6ba6f02025225e3c6d0dc8c42efecc8f6982cc62df49de3145b62

  • SSDEEP

    6144:PoyZmTAsfJFakxaLjcMkc0Cax1PnGp6bYA0w601+dNT9/0626ASkVOAFK138l7SV:PoyIJsMPrPGp6bYboEdNx98Evvl

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2