Extracted

• • Target

    2cd872f97767b7c125f2a3acd84aa6ad7c7be33a1c0a5b8df0b53b658b9d625aN.exe

  • Size

    467KB

  • MD5

    abd2bd452e92fffc8cb37dcc96bed350

  • SHA1

    79542641afb02cf5cc4f3675a5e77848198cab4c

  • SHA256

    2cd872f97767b7c125f2a3acd84aa6ad7c7be33a1c0a5b8df0b53b658b9d625a

  • SHA512

    10463e99ea5ff5ee9a49697b1c829bb2fe641f6ba2a7c48b21f18cb6ab7221713e9536f1a98430c73a96e8fb7b1275177a3e2df733a3b85366f2176367d820b2

  • SSDEEP

    6144:4+rxvPoiHw7sQ65lZvygWnMF6kOr6ZOhm1wdZkRmxVEjPLox2xqBBgGLbSU:Prx3IsQelZvAnbRr6ZGm1wdZkIxYWj/F

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • ACProtect 1.3x - 1.4x DLL software

    Detects file using ACProtect software.

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2