Extracted

• • Target

    57393ebadf8b8f14a2c0f3650e2277e25180773fe391690c51668bf94e276570

  • Size

    97KB

  • MD5

    40a9e042c66c448211957b28f01ffe65

  • SHA1

    8f892d0c6e9a172b8e1b2f38e3a68231e84291c8

  • SHA256

    57393ebadf8b8f14a2c0f3650e2277e25180773fe391690c51668bf94e276570

  • SHA512

    c8e954ca08c2d9bf505e5b06cf970045667e568b21ea5bb2f5b24681ef97cc86ae6d3a942b2b945729645551109a03c03d78ec4aba30465eac746b96a813e158

  • SSDEEP

    1536:GfnJehsWoePvbFV6zmZRRhCAZKkNp8rmcLPcD2AQIUz2gulciaWZe:GfnJeOM3b2CZxjvNHMzKUz27cee

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2