Extracted

• • Target

    2024-12-14_c2e567bba99e99efcfb36c5ead252623_bkransomware

  • Size

    626KB

  • MD5

    c2e567bba99e99efcfb36c5ead252623

  • SHA1

    78fb3db38c6fb2c27b7cae52b22a6377f5e1cd07

  • SHA256

    58187a1a99598064748eef1d70a9714e02f36d73038fe30399d561a8d18ab3c3

  • SHA512

    6346f6437166ca9c167237dfb91cc431ce08534ea3cd2aa20473adce24f38ac60f3021777a398b546ac53004c21823a08a0350d058c77620b75aa1ef93be0ec9

  • SSDEEP

    12288:RZA1XTqj5qUQ7Z68MeFcC9sA7V/AB0gRq47LeAK8d/gNdD:RZA8NA7rdN9L7WB0y5e/8dKD

  Score

  10^/10

  salitybackdoorevasiontrojanupxdiscovery

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2