Extracted

• • Target

    1428c2cf0842329914e113c1b04fd468b3dd0d1982ee135d00155e5520b6e162

  • Size

    3.0MB

  • MD5

    722abbcb1065f51d030e5efe3e528fd4

  • SHA1

    abf558517128968c7c9690804234a3a81337b103

  • SHA256

    1428c2cf0842329914e113c1b04fd468b3dd0d1982ee135d00155e5520b6e162

  • SHA512

    eee2451eb95627294e5d573b9a4c0b69a5e35a6f9434c26cf946422d3f0386ca6eac11f4b22955b07d6f7ce87343fb30fa3d8e83bd09b706d430f38c4bdcfbf6

  • SSDEEP

    49152:/Z4rujE/CLlVl80CdSI3LdmLgWtAjkhAd86LqmQKzeFH/LNqAznwmS:/+ruj+CLflabdSgGhn6OFGUwmS

  Score

  10^/10

  discoverysalitybackdoordefense_evasiontrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2