Extracted

• • Target

    84b209c3fd53ecee6344116f61f9b8e3c6333520b5805c1fe638034c87da9a8f

  • Size

    1.3MB

  • MD5

    a557975b9bc4b3726468a6b3cf6d4e12

  • SHA1

    637f82035027367dcd7b414dc9ffc594b277c23b

  • SHA256

    84b209c3fd53ecee6344116f61f9b8e3c6333520b5805c1fe638034c87da9a8f

  • SHA512

    aaffec2a5e939d0fbf59d58a05c4891443fe4a9818946eb6fea0fe2231b7211a9020fbe6eedcc43389fc3b8b81c30fdfe2e0c6cd1a55f4d7c4c90173179b30db

  • SSDEEP

    24576:1nIpp65ZouNDaKdDPhoH5Xlpoyt5qqnniyzVM894:WppARbDPhoGyt5qqnG

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2