Extracted

• • Target

    69fa49b243fb925d4ff17c07efff2b27f9c1103c240a9aebce6aa48b00f2e3f5N.exe

  • Size

    97KB

  • MD5

    46f467c5742eb6e1a5234cef0cfbb7c0

  • SHA1

    5afb6e3ef3359b3ba4d5f1bdbece101d91b973c4

  • SHA256

    69fa49b243fb925d4ff17c07efff2b27f9c1103c240a9aebce6aa48b00f2e3f5

  • SHA512

    7e4e66b331c9c4f310449a68b9eb4343b7c379d460ea7d6f9e4438a73c4144b3d8f4160bb7613e2e61e7ab5e4c0cee9ad27391226138e11683434cbdd2d4443b

  • SSDEEP

    1536:SddNIlEACVgub7fR3E5rk6A9uC0zJWZJFzB7iPnaQwNcBXlmOPtTwGZdG:vpgiFkHb0zI77iPaQwkXUmJnrG

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops autorun.inf file

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2