Extracted

• • Target

    88fd2188695632f1b1f3901847250850032bba7ace166d11266dba8f289e3ee0.exe

  • Size

    65KB

  • MD5

    e3a4d35246f753e57a919f6a51073058

  • SHA1

    fd9b58c87403546f7473cdb12e5d6885301f1c42

  • SHA256

    88fd2188695632f1b1f3901847250850032bba7ace166d11266dba8f289e3ee0

  • SHA512

    d7c71a8dabb44ec2b6b9cea3632d5a91438732716be8d094d375b9d40fe37fc569208680ff620cc3306a3786ff31eb97f81877a0a81860e7cbfd0ffc3f9862ad

  • SSDEEP

    1536:Cyo07aK8nHFGZzB1KLE7hOIobCm7Rv/Ar0LuoUm07Gynr5h:CB0EnHcHvcCmN/hLDUm071nr5h

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2