Extracted

• • Target

    50b4a5645db067a0e298f387e5a9d68b74bce2c6549a3595dcab06b3edc427a7

  • Size

    65KB

  • MD5

    b62adc18fcd138082bcb0b4ab940ecff

  • SHA1

    8a41de5aec8a54630fda8e593c2bd6d100adb580

  • SHA256

    50b4a5645db067a0e298f387e5a9d68b74bce2c6549a3595dcab06b3edc427a7

  • SHA512

    b188070fef49a6ac1ae9448da1d6d3e6fc7851fb1ebecfa51454ec968e21726e89981f38fec85a5aa6d7bb0c960f23c537bf620e705b2fc15cdf56186636beff

  • SSDEEP

    768:UqZfG9OIQ0Te9bK6QV87tt6hEe0/FP16gTfD9G8asHOOHJkPTMMUA9RjJxRaz25z:UqZfGa/BKKe0/F9tfD95/JOH9VRMmc/c

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2