Extracted

• • Target

    6f5810535a71dbfd6b10517a871dfd85e5e5f9c3c504e16910f5c5d97211df0e

  • Size

    654KB

  • MD5

    7533d0576eead381d2502ad6ba854263

  • SHA1

    63b84f4f40172bf6d61884d4739325373a43b93d

  • SHA256

    6f5810535a71dbfd6b10517a871dfd85e5e5f9c3c504e16910f5c5d97211df0e

  • SHA512

    7b629e3ebe2cca4bbde06c672cfd414883f23f103ff0809b7453a8e873ca3d87ced8597412a7b7a9d5abb6cdfc51c940556ba77eef97e6f21d413d906421ac18

  • SSDEEP

    12288:r98rmdR3y4dqXLBzy6LRWohK9v26UrmAP6mY5O95Ev4uuYRY+hSIfiDbZwE:58VXpK9vJk6hO95sDKASIf9E

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2