Extracted

• • Target

    af74cf677a1ff32b83152e407b33660e8d0aa6c6c01e11b7a669b69273c6dd92.exe

  • Size

    65KB

  • MD5

    212162916c60f70daa3a75c40e61500f

  • SHA1

    986561b1454e0a771fddfa84384bcc8fa40c801a

  • SHA256

    af74cf677a1ff32b83152e407b33660e8d0aa6c6c01e11b7a669b69273c6dd92

  • SHA512

    8998327525d46ef27687b77239296f6c2f6fdc478a46d75eb99d608134e90f03f0fed8a098b89f53a3b3a8b38ae91a01ac8c636249e8fcade675cb71fbba319d

  • SSDEEP

    1536:iHUn67HlJiqqFeac/Kh6+ybA4tBnGDkf8xPOaD+rpVtZuzJ1zwnw9:iHk67HDlqFoC9+AdDkfZa+pVOwa

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2