Extracted

• • Target

    537a8a53edf8357b06e5a8e354931dd3666b4bc79bf3ce070e53499c89ffd18f.exe

  • Size

    97KB

  • MD5

    e5453e1763e4b77e2a9894e804ce260a

  • SHA1

    306cb430776590fb42dabe188b1e235c1f6009da

  • SHA256

    537a8a53edf8357b06e5a8e354931dd3666b4bc79bf3ce070e53499c89ffd18f

  • SHA512

    8971c0b9220be32ee81846c81b24243cbbf4e6528a0e568f6c48627a9bde43fe78f2dd2f9fe7a425c9e0eb839130d6c822e7e25054094f7194b33601e4782bbc

  • SSDEEP

    1536:hEPb71cTt54NKJnaQ5d9Fm2BDMGwl+cideuPKstWVUY0TjSUrCdT:eD71caKJnn1HFtisI2YmuUedT

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2