Extracted

• • Target

    5f77eab5a46dfa1f2bc6b5130ca41bc618481d21e8c6a1d928a0e6f484481288.exe

  • Size

    231KB

  • MD5

    74e2e902fe26ef39b6cc58187f6e85f9

  • SHA1

    cfaa2c01560e00fd2e4bd342bd956bcb609d248f

  • SHA256

    5f77eab5a46dfa1f2bc6b5130ca41bc618481d21e8c6a1d928a0e6f484481288

  • SHA512

    629c5fdd405608bd3e62b129f71159a7db2987f27dea3fcb347d6384b53ed7630fc092274d37af5c6847b8c98241c186de674608f801ca450cf546b576113dca

  • SSDEEP

    6144:7u4u6wmIo2EiO9rTBC+j8EP1P2CjkU7zGfNrGC:7u4u3mtzX9rTI+jz2Cj/7zk0C

  Score

  10^/10

  salitybackdoorevasiontrojanupxdiscovery

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2