Extracted

• • Target

    6a3e27b0540fe392b2949096501482523f8ea9b097ebc0f914998024863ae7db.exe

  • Size

    780KB

  • MD5

    1b428c1780a986a3bbcc124192aa7b93

  • SHA1

    510c649830f823e80e001e98717d0d8c466ab9dd

  • SHA256

    6a3e27b0540fe392b2949096501482523f8ea9b097ebc0f914998024863ae7db

  • SHA512

    74aa103035985dc6071f472515e0f813f2a26b45658020b99e473b2f0a7816d4717f41fe67cf1e81f795f1d56017703effa5f302578a7bc16dbaf881789c8ca9

  • SSDEEP

    24576:F0ZhDa7BatUBFM8su0ZjpXZN0FmEOGpYmB:FwWNFBFM8s9FpXHunB

  Score

  10^/10

  discoverysalitybackdoorevasiontrojanupx

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2