Extracted

• • Target

    29d6e87abc325ad0e1594653bc143ed08edfe6e5d5e591c72386cada4cd02cb7N.exe

  • Size

    65KB

  • MD5

    27daf650d6a99a543d1c351f73b63f60

  • SHA1

    45e97527a4466c2d916228e99711f9984abbfca8

  • SHA256

    29d6e87abc325ad0e1594653bc143ed08edfe6e5d5e591c72386cada4cd02cb7

  • SHA512

    604b1d67594b2f3d83b3f17f7fa8a60804a15911d0e7a270a535408e5e3ec6d1d3aa3c3186251051a6ee09f6064fb4cca2a5c93b0b8313effa592b7cf327f3d6

  • SSDEEP

    1536:vyqxPaeNSBIuHNzNF5A9kuxhCNjM4baptJb0YbKdDcT/vw8:vyq1aG9uHdNCxgXbQtOUK6X

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2