Extracted

• • Target

    9cd4cc8f12a252de1c0138bcf6191d14e9983ae25bea59c2319642fe9ffdfa00N.exe

  • Size

    65KB

  • MD5

    2d97634a75cb597356f911597ec016e0

  • SHA1

    66b426b00b25930b862122b8b9717dc213c132b7

  • SHA256

    9cd4cc8f12a252de1c0138bcf6191d14e9983ae25bea59c2319642fe9ffdfa00

  • SHA512

    c0fffd243a02e26b375b9ad44adc994773b60c387d94fcfd9f68ded5522849b4320ecd473337b6e5db69b1567ef812d621ae453475efb151a8d440b774dd73bc

  • SSDEEP

    1536:uwwnhiGF+ENePs/c/VdDHtlvZH7i6mtVpe6mFp3FGq/TMp:uj1zN6ZrtlBmb/evX3FtTMp

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2