Extracted

• • Target

    975729ed208e5556caef4d8570de10bf584bcb66878572d085519578f34beafc.exe

  • Size

    65KB

  • MD5

    ac3537ad0feef39b408fe4c7f65c85cb

  • SHA1

    06b97dde36e66cf3659f19a4afc4497cdfc306c6

  • SHA256

    975729ed208e5556caef4d8570de10bf584bcb66878572d085519578f34beafc

  • SHA512

    8f0c33912fe2c29f702061f677848f7e67dc29b1a77946ecae0ee9667571beed1ac21c8898bc84c7ee2e22d27a1c68a23b5d0f93fa7ebf172b4a27ca67339304

  • SSDEEP

    1536:sMaXq6rCpFFKikGEoe6IhuX23+QVOF0cxC8oF58etgwIfgtNt8iX:9aa6r+F4ikGC6jX2PwrCHv8etgrfgOiX

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2