Extracted

• • Target

    34753d20b669808ca58ee76347b2f509ee37d3fd4808fae8c8f68cdac74c08df

  • Size

    550KB

  • MD5

    1f1fea33f3e12e22c9e9c38864f89888

  • SHA1

    14183d6e9b2224b88a8af387b1589f2eb0bf7c24

  • SHA256

    34753d20b669808ca58ee76347b2f509ee37d3fd4808fae8c8f68cdac74c08df

  • SHA512

    6c7fc5cc23bcdb62bf98f8e23832a9cc426ec9b2cf727a686549f0b1593c15a3add24c89ea477be51ed722100fe891fcd86ffeffe17bf4b4a19147ad222aec08

  • SSDEEP

    12288:OC09GENBxf6sEHViIox9bkZq03sfNOA+:Opkqrf6j1ij+ZsA

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2