Extracted

• • Target

    8a02e10cb7889a1f7c6c526b8950fb40bd8fd48c7e662cf1a66ae77bdd9f067eN.exe

  • Size

    97KB

  • MD5

    f690e3965d69041b7296594b9e728780

  • SHA1

    1061322b3c5822f8a76eecf4969ae47dfe53e5b2

  • SHA256

    8a02e10cb7889a1f7c6c526b8950fb40bd8fd48c7e662cf1a66ae77bdd9f067e

  • SHA512

    bafc6fd28a479be950e358e16306e05772149753f9d7e02a0cd82de36f5d37c8f15ca83eca4dd203abc68292f3477245cebebb65e52a5d4450687ddbb3f55922

  • SSDEEP

    1536:tUoo5PVEKrp3cP1tKF/H2VTXVIk3P8loRQl8rlnRFg5Vhl3x:tUoo5PmKNzF/yXVIk3Pdul0RFgzhl3x

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2