Extracted

• • Target

    e083b05f43361fbe09c7f9e5bdb3b23130905b79f409b550b76a5632d021b4b8N.exe

  • Size

    97KB

  • MD5

    33dddf8fffbc51d76b61934b222f3c00

  • SHA1

    1028033254fcbb4e1e69b95351bb67880bd203d4

  • SHA256

    e083b05f43361fbe09c7f9e5bdb3b23130905b79f409b550b76a5632d021b4b8

  • SHA512

    c634bf31ca9cb7a2c84bf5aea81c958e446a0e6ee9cd3f4f9c262f1247bc1d4e248b31e3e26b3bdb77f5970a9d110e69ea8cf47c0277b293be71f361da769e62

  • SSDEEP

    1536:crJON7ZolfvnS0wgH0Z8XnZeQS90NnAICkOg5RbT8zE+M9OQPYJSIagsiqfmw9:7RZoFSQUZ8MHMAkRPXtsQASxgs5l

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2