Extracted

• • Target

    07466a2d9ef36817f95d455a8439b1b1ca807928c26aacf7ac9427fef6830e63N.exe

  • Size

    65KB

  • MD5

    8166d162d9d279b8d86d8605786b9010

  • SHA1

    15a9b22e4364dcbf6a424fbb01029934e76a1eac

  • SHA256

    07466a2d9ef36817f95d455a8439b1b1ca807928c26aacf7ac9427fef6830e63

  • SHA512

    1ba83fae9d4ca0a630b4a09e80eedea35722b721eb4006e88e589bf72edc2662b1b548f02138507c9676f475d5b432cd0179478fc37bb875467331b7c4809e6b

  • SSDEEP

    1536:7U1h1pna+mMt/HQi/7U8gkhmVpVWO/JxkFs1n6M:o1ZnLzt/wk7tgsoVRBma0M

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2