Extracted

• • Target

    53910b281e1b5571d97c9e187bfeda4595b1cb298f909d78afb2bc37a4518e8eN.exe

  • Size

    97KB

  • MD5

    9478c379fecab50c3d216fd7ee8e96e0

  • SHA1

    3c024f84cec3f54068c3e5b9aa829d65a9c54cf0

  • SHA256

    53910b281e1b5571d97c9e187bfeda4595b1cb298f909d78afb2bc37a4518e8e

  • SHA512

    ad6ba53785d734da6078d2596a93363494f80bed804bb6e3954fc58d23cd95af9d8b0a2553e0724eb4a97b5d57930fbf91bda94c5678ecd08d90c4dfaa7e8dcf

  • SSDEEP

    1536:7ztgDSnVIE2AcsrwiexFzseqJ8RhboxwwtpUYpRgbAI4Q6IYc:7zS2ntr/e/sFSRhEPUYpRgZ4DT

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2