Extracted

• • Target

    2024-10-08_8b14bd4c2104dbe913e9f0f54fcb45f7_bkransomware

  • Size

    528KB

  • MD5

    8b14bd4c2104dbe913e9f0f54fcb45f7

  • SHA1

    adaf7f4d02c66327ed1e8a5516e5180cc0680004

  • SHA256

    4914b446f8aec422a8ea5c5608992ae45a6be2f5c312d88b1022865303fd15d8

  • SHA512

    89af129061d94c53cb7145e326e1d7640232c140d351449ec506a4deb626afe76fcb731868af02fad4184bd2396772681099a61863b46eda0c5c1a596cbd849c

  • SSDEEP

    12288:+oyIJsMPrPPp6bYboEdNnbBqdS11yMSzY:+gVPrPPs+oE7NqdYJSzY

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2