Extracted

• • Target

    890393f0b4957137c822297c8f8c4bdeb0ac48a0bb9180e427e1339dfc26eced.exe

  • Size

    65KB

  • MD5

    ccf1098db5153751f5ea7330f2160f68

  • SHA1

    88d32a433d45be0caa9824f8a29856d70f52c49b

  • SHA256

    890393f0b4957137c822297c8f8c4bdeb0ac48a0bb9180e427e1339dfc26eced

  • SHA512

    a9ca5da1dad938a069f5dea5f99daf22b53164cff73f5249543d52ebbfa6d09089aa0b3a60418685348a4a1e1e31b178b931e4eb115663530ad8d514107441e5

  • SSDEEP

    1536:eIO3hcrUOZ4NRMga4ArOWXHfDGa2JL1pmujbIolPHCUZIt:/OKb4NRM14AKWX/DomujbBit

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2