Extracted

• • Target

    2025-02-02_d5fee229eaefe2139ec17addd58d326d_luca-stealer_magniber

  • Size

    8.6MB

  • MD5

    d5fee229eaefe2139ec17addd58d326d

  • SHA1

    dc6185d0172c473cc87992e5370e9912053b589c

  • SHA256

    fc6fa1d9e700b573db726a4f29765e4b0e35c897bd3d2117453578c66de8814a

  • SHA512

    3c675e079ba56a4906f59e6a3f0b0b90ccdfadf81451cbeb767b2cd7a6149bce4a58b38630333b1caf27998444aab891d045e30f617bd19378e66be9df83c97e

  • SSDEEP

    196608:y4T0xcsSB5orrc4Ssi0s/lmPJ7N3VvXWrqufezvqtu:yCoX+lAJ7N3pXW2uGzytu

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2