Extracted

• • Target

    2025-01-31_77154bddbf01cec58e8594b24b8265d6_luca-stealer_magniber

  • Size

    8.6MB

  • MD5

    77154bddbf01cec58e8594b24b8265d6

  • SHA1

    13fad2c7765f886927d3de7a91ec77596d8a9a48

  • SHA256

    d67e10c957e55ffdd08b830299062c7366ad89a3a64ce9b7b6b6ce1b998dbcfd

  • SHA512

    1f49c739aaf7bea57fd47fe1b14cbd05e1642d683b9ad33c9f216cf7a1ee73a64f3863f509f15e0a8721277e199aa197b861fbfcf0db1b0204b94a3951ec091b

  • SSDEEP

    196608:y4T0xcsSB5orrc4Ssi0s/lmPJ7N3VvXWrqufezvqti:yCoX+lAJ7N3pXW2uGzyti

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2