Extracted

• • Target

    2ca31de53bdd16e964b4078d13d274abf5770aa580a4312bfe185330344ec048

  • Size

    1.8MB

  • MD5

    601004d7d195936811924bbe9449af55

  • SHA1

    7c8e9afa47fabca1ca81640530457a3a2acf59be

  • SHA256

    2ca31de53bdd16e964b4078d13d274abf5770aa580a4312bfe185330344ec048

  • SHA512

    f1e370f80bafb467f2238beebc56e8390e94ab95f3cb09aa6b144dd4de223ebbfa48868cc2d9890a9c4e2361c323481e90171f611d2e1b9277533d8f01deca48

  • SSDEEP

    49152:jBxrLRwxZMuG2KbqSiPkvcIT1R9psVI8jGhlcPhhxKg1OhBhWK:LLRwxZW2KzisvjT1R9psVI86hKgg1Oh9

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2