Extracted

• • Target

    07ac24542fca2c0a496e1a3638d7f5b6fc51567fe84e45a22e121be98d9dd1aeN.exe

  • Size

    65KB

  • MD5

    6f5f51a6e0187aaf6232d8ecabacb9c0

  • SHA1

    412e1765d628282eebfe28ae3fc31712f5d30808

  • SHA256

    07ac24542fca2c0a496e1a3638d7f5b6fc51567fe84e45a22e121be98d9dd1ae

  • SHA512

    e3e019a5772abee1c9673f6a7af5ba775b012d4f4a4328ab1f311b7943053815ed68d6a1efe11eb1147acb3e663c8b69b4d8c7fa9609e261664c5fb0d9f1b4ad

  • SSDEEP

    1536:qd7JTAbPsFQM0L3avOJu1dI7a+StLFBVsELtXL88HK:YEbkFQM02vOJ0I7a+cRbZXor

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2