Extracted

• • Target

    d2f1e06da247b84b700ab455a123c815c67e970320c939e91a60293cac788bdd

  • Size

    97KB

  • MD5

    655d2c37fc5a8ff0493368f84ab7a57c

  • SHA1

    5e2c313a6319b809ecad35063f44b54b695a6b12

  • SHA256

    d2f1e06da247b84b700ab455a123c815c67e970320c939e91a60293cac788bdd

  • SHA512

    69de27991d6dfc85b9a6011f4cfee8670fa4f1883dea2fdd185848a47a23137e95852c785e9da3fdced8279dffcbafdb18466ef15e3123f50106ba2fd6f80776

  • SSDEEP

    1536:XH0U+DV+YKj9qDKQXMpcGo6wXCtAxez5SG89LEyXqJrp5WEzp:XHsDKOpGo6wLcz38dEv9XWEz

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2