Extracted

• • Target

    c9e126c4756c94f5c998944ff068f88cd998d67aaab9d54036070ef25a57d42d.exe

  • Size

    65KB

  • MD5

    301dcd05e5e3dcec6fadbd7d857a2bd5

  • SHA1

    ef7c8758e1dc53e2596c95291551a2ac521cc92f

  • SHA256

    c9e126c4756c94f5c998944ff068f88cd998d67aaab9d54036070ef25a57d42d

  • SHA512

    b7991fcc1dd94d21ab1607dd100dc12d1b9144c9055f5c5f72665bcd4bdfd17d9451783df38cba72d0a03278a7d233fd2f6fea06b4659e9c567915c6794cc2d2

  • SSDEEP

    1536:Sa4ETqzz4W4Ca3SxWN6YtRwQvD5YOO8xN6jAjItkD:TMzk5IWNpiQr8jAjItkD

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2