Extracted

• • Target

    6c9b7018e0fb2867a556c6f89a36aeafeaa3d128a299ca1a91fd6e4d0ff9451d.exe

  • Size

    65KB

  • MD5

    3262a84f47e524eb309a6d7383d6fd56

  • SHA1

    92d58724feccf051473c1b0c73bdfe79dbec1584

  • SHA256

    6c9b7018e0fb2867a556c6f89a36aeafeaa3d128a299ca1a91fd6e4d0ff9451d

  • SHA512

    8c78ec8073879710ef1af79b889c658a28a067826bcb22f284ae3ac8edc3912e832a10118b9c8b44f5e77b58af661578fd839dbf2ea201ada391d233d71a5602

  • SSDEEP

    1536:M1yGRZodR+DfCvyqoVtLftxQwC+A0fKU5e68kCboDF:M1xRCH+SyVnbtWwZbfKU5e6XDF

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2