Extracted

• • Target

    f45c25f7178eeae3a3184b4bea8b35172e43d3de61fc07c990f0539b7a6d8dbbN.exe

  • Size

    65KB

  • MD5

    aeff0dc91f8c4c67308f8c94a43ad180

  • SHA1

    6f7f9590aee2921df823b31b9cf37033a8c53d68

  • SHA256

    f45c25f7178eeae3a3184b4bea8b35172e43d3de61fc07c990f0539b7a6d8dbb

  • SHA512

    155f53417a29470baa08e605f5b5283a1ea7502cdf90c15f8f53acc0a31024ab576146b6beff5c5399fb6bf5ca507d417f3648afc8a33c417bf87723bb54e0bf

  • SSDEEP

    1536:sJEPuog/9rUSEODWLINa3+JQqpQSy5vj0CB5+gcs:sJ1ZUCDuINa+W1jv5+i

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2