Extracted

• • Target

    0837b90b33bbc586356c3b4e42c5939040ed4085ca971ac4d98d5a464217acffN.exe

  • Size

    97KB

  • MD5

    da12e70acdf93f08c6fe3d414104cbb0

  • SHA1

    9c98248ed7c030051658c39f0150bf2f3df7e506

  • SHA256

    0837b90b33bbc586356c3b4e42c5939040ed4085ca971ac4d98d5a464217acff

  • SHA512

    073125d92ca5dadb3fc7a82c98117f2eb4b98c7c68a24e61afe6ffe6ef975defdfeea82138dcfe60376a8174142c4ed5a33ba3113d77cbab9e7e5111568a8971

  • SSDEEP

    1536:ypZpAo7PemZTXoNaijaN4FJ3gREs68CtAL8PsYZZSnrvrMYoAVfox6c:UZ7PemwaeaN4FJ3gy8C28PZqn7o9Ado

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2