Extracted

• • Target

    93e2a35b38141a0fd253002dfa618f132fe66c1078e6d6037923e0bc9b2b4ab9.exe

  • Size

    65KB

  • MD5

    eb1e55ad29cf0c61d345f5cd43cfc981

  • SHA1

    e5cdab866d62b06df70538fa5def7546b4018b92

  • SHA256

    93e2a35b38141a0fd253002dfa618f132fe66c1078e6d6037923e0bc9b2b4ab9

  • SHA512

    7d2a3ee71139040c2a5c82b462877255105dbb5673bf86321a44c034cdeaf23f0ed90306ea449c922cb0731888baa77a4649f0f690e27c912492c09eaa9a0616

  • SSDEEP

    1536:5KwQdh7YOFD49r0TV0+dmqrayqpihZrWy1ZCoX:gwQdqmcJ0h7wqXZrhZjX

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2