Extracted

• • Target

    2025-04-04_ce41fef45c3add8535e684ac28f408ea_amadey_remcos_smoke-loader

  • Size

    2.0MB

  • MD5

    ce41fef45c3add8535e684ac28f408ea

  • SHA1

    e72cd6d6949bdad6c15f9af01a21476e16b2f6ff

  • SHA256

    97aaada1264b8f2e044885248d8023caf084924ff4512cc9b617d239fea38a86

  • SHA512

    9dcbc88dcfb53f119dae18a380c60119a86dbe4105fa53805c449abd60cc40eb5dfa06e97069c12b9346e89cc94c5cf75eb31e7163671cf354eba67782876371

  • SSDEEP

    49152:yNiymhM+pnfth6N4ksLQkkIVyO2mS6hxDF4OnQn/8BF6fvyiUMBgd:yNiyx+pnVQsLQE2H6rDF4OnQn/8T6Xyf

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1