Extracted

• • Target

    6f480692e42acf2a4111f097a7e3469b43bc275c79a10b1cb7d454e185ef4e41N.exe

  • Size

    65KB

  • MD5

    836b8567ea77d9283ef6d2270c34c2a0

  • SHA1

    50e1b27163f61784cc12e8149182f914c8474391

  • SHA256

    6f480692e42acf2a4111f097a7e3469b43bc275c79a10b1cb7d454e185ef4e41

  • SHA512

    92ab6b2c85621da0959e2d18bef7fe1765cedec93f2f07c16d5b63b149af3cc0f1aaadad8d26d5bce49462486c0073c22f2bc3e52b2ed889039533b59df88f98

  • SSDEEP

    1536:C67GyL30fLGMGWRg4P/vaQ7E39VBg4EPM6hVqgyAr/g43:OyQGxGgsJElbEPBhdymYq

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2