Extracted

• • Target

    d532d486f26525f8cc3d0a22f2cd8bf013e2cba605d981af156f78e0ef717a8bN.exe

  • Size

    97KB

  • MD5

    dff4b3098f40427823c62b60c4558080

  • SHA1

    1d995c5baa3253759d7b869a1913dc233f2c2391

  • SHA256

    d532d486f26525f8cc3d0a22f2cd8bf013e2cba605d981af156f78e0ef717a8b

  • SHA512

    9b1dcc4cc2ff4f2a11d862361c33f8c8f26f6b1f7713d690c601174386cd1445ecf2fb38792e68621dd792875e4a0aa02331c5e905bff1d00b4e08383a50df24

  • SSDEEP

    3072:zM/9+89EX7UU258RCgEZf8iH1rWLRC+O1l:EDErv2q0ZkiVrW9C+Ol

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2