Extracted

• • Target

    23c9208297badee020a35edc41c5c85dfa0f625adef122f87ff246dcd1ab11e3

  • Size

    651KB

  • MD5

    79610998521328e287260d58d8a11a55

  • SHA1

    d2e8c589e6f5e596f5f150e375a913c39f34aa48

  • SHA256

    23c9208297badee020a35edc41c5c85dfa0f625adef122f87ff246dcd1ab11e3

  • SHA512

    67d3b4882fb324422da6fdab11ef9c6ca05dfa5037a24a13beee2e4200b0dc78bf5690c26a35cdd8347bb22590ba0dde3d8d518a8b0032202a47b7a9527758aa

  • SSDEEP

    12288:fKKY+pSW6rcCXnXFwQk7nkeHo6FIIAIo/c888888888888W88888888888b3kSui:Cu56oCXnXFwQk7nbHo6FIIroM0m

  Score

  10^/10

  salitybackdoordiscoveryupxevasiontrojan

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Windows security modification

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2