Extracted

• • Target

    57f454d5ae493c86c3dd91013f2c3b6a2bed5642760006c109dce5aa817113aa

  • Size

    3.0MB

  • MD5

    b382ba9f6a273a197a12d5a52f257d77

  • SHA1

    ef512aeed89c9f67354387286255b7fbc6e9dd5a

  • SHA256

    57f454d5ae493c86c3dd91013f2c3b6a2bed5642760006c109dce5aa817113aa

  • SHA512

    53f6ded7e256d0c8eb15d7f53b490a348953aee15edaccbf2c3a60f4cb442960a64743c80c9cac269bf016032dc2ef78b04cb9c4928047f2358323909b9b8c50

  • SSDEEP

    49152:WZ4rujE/CLlVl80CdSI3LdmLgWtAjkhAc86LqmQKzeFH/LNqAznwR0:W+ruj+CLflabdSgGhG6OFGUwO

  Score

  10^/10

  discoverysalitybackdoordefense_evasiontrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2