Extracted

• • Target

    e5e4d267c9c870e132178de08e8a179c97b5b8245d129fa8372287c5176e0ce4N.exe

  • Size

    270KB

  • MD5

    2325c728136f3f0f4b9edacc66a2ffc0

  • SHA1

    e6bf1435e75593aea7f56d9a2a58b0230572783a

  • SHA256

    e5e4d267c9c870e132178de08e8a179c97b5b8245d129fa8372287c5176e0ce4

  • SHA512

    1a4d9c9910750e565685a4bedd121ff834f8a7c2c3b83f1603b4c4a230fb97e0ef126f24237572189a80d4e8953f0487a19d96bcf65ea360014b62db0fb33c3e

  • SSDEEP

    1536:gBwm02zOoxn/2fYsnpJRaCAd1uhNRXpXMOrqXSF63tokrqSDuiLwZUEzIiSeloIe:gGzoxnEYsnRp8Orq26ekdDuWwwglD4

  Score

  10^/10

  salitybackdoordiscoveryevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2