Extracted

• • Target

    2025-03-30_30a2f735e693ca5fcddb3d156411ec2c_amadey_black-basta_luca-stealer_smoke-loader

  • Size

    1.1MB

  • MD5

    30a2f735e693ca5fcddb3d156411ec2c

  • SHA1

    aad0887f202adb3e4ad88f5ac1b8d2a436c60f9e

  • SHA256

    e7cce292772be0783439ad3ec16f2a7be14c343a56681cab92fcb90ed8d8cd59

  • SHA512

    21da43da5a7e4858e0ad8e3527881b8735a0bbc08163fd3fd857e307ee43dfc6fc3dd4770f5aa8fa9469d519c8fb16f36b0a5538255027eaef46174b4f7abc19

  • SSDEEP

    24576:xTCnLtBb4i6KDlNImvgI/4UxUQ2p56iqnesZK/oYV:xTWBV66XvOQUQ2p5HqnYpV

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2