Extracted

• • Target

    220593d99b4f108e5ffbbbd8f706a49bf8902e6a97b8ac5376af03d0fb5913f5.exe

  • Size

    65KB

  • MD5

    595284916f66b48564160467bec9917d

  • SHA1

    3b191afd6c28ea4fafd782225c1228b9465f767a

  • SHA256

    220593d99b4f108e5ffbbbd8f706a49bf8902e6a97b8ac5376af03d0fb5913f5

  • SHA512

    59f05d173397e4efad909df7ecdb7a290bdb83205b8dd7653f922201fa1358c47fa05cc3bbbe20122713a29877936409a2b0ff57a7a874af8df547639efccd43

  • SSDEEP

    1536:0Gh691Wb4UKME+beTEN//yq7SgHHOHcDkEADDun+A+7:0Gw98b4TMzyuKmu8DkL7

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2