Extracted

• • Target

    a545eb43aaa8f8f1d827e860fb69bdf2a11d1bcbf711ad4a9b2e2ed3c96fd475N.exe

  • Size

    65KB

  • MD5

    83f995ca8b93085a17f6a26e02cb2d30

  • SHA1

    ab27b5c15233a281e4f9b707c33c3afb77c35178

  • SHA256

    a545eb43aaa8f8f1d827e860fb69bdf2a11d1bcbf711ad4a9b2e2ed3c96fd475

  • SHA512

    b5173ee86e99ecec8298100582754029be7f8e1a936c739a99cb7c1847437e0cd1a73d27c1de0538bd307b49779c317c666047322e64038a3e84c3562b5dc5cd

  • SSDEEP

    1536:ghD2/Rsn42ozT9nuWXxdJTz/uhUnv+mYT8PjIiwET2QGJeMHQ:gE/hRzhnuSJTjhmmg87NT2Dvw

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2