Extracted

• • Target

    2024-12-24_b5747341a56b566f6b4bf732a56dd8bd_icedid

  • Size

    451KB

  • MD5

    b5747341a56b566f6b4bf732a56dd8bd

  • SHA1

    6c0787d01ad3cfcdd512e723ce1a45cdd0682234

  • SHA256

    bb43871f560c66335eeea7b752cfa2abb64d9b2b3ab5822fe8c5886b8382b329

  • SHA512

    923ca611c404ceb7596fab222cbdc40b2c2ed967f72f09129644253d8c691b0c5bbc5ff36c212f938eb17994871e5177a618a0ed645b27c45ce1fb1d3aa773ae

  • SSDEEP

    12288:hCxAOM1UWJatBWUUDC9SwN6FYOvDTLqqMtC8GUnKe:AAPJat47GS3FYMTeqMtC8D

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2