Extracted

• • Target

    fa2fc1cd610d84c06c1975abcc6d0d10N.exe

  • Size

    97KB

  • MD5

    fa2fc1cd610d84c06c1975abcc6d0d10

  • SHA1

    d3712e86b4d1d062e2513e673c04e64314ea766d

  • SHA256

    9224966a4ce20a657271d7a54d04a785f4062c543e759b2fc36bbd80b8fc157b

  • SHA512

    aa179c85e39b08d628fd75d1fa0a3379d12e2ff7c0e4afd58bea422d05d5e84246816ee4c69a835591ebb962b787330cd59f46188909d1846c425c98dcb35b44

  • SSDEEP

    1536:2i5efcS2vSUTj4hcALhkb8Uc4LMo3pDXgM+/RkS8CQyxM:2Ae0/1T8hol9XpDXF+ZkSDi

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2