Extracted

• • Target

    2025-04-04_633c298997671cb2fc149aadd8108633_smoke-loader

  • Size

    344KB

  • MD5

    633c298997671cb2fc149aadd8108633

  • SHA1

    95450828762abd052d8696490c0c188309115f47

  • SHA256

    6d385418e7f797397340e2664f9fdfedeffe2edf1028c65033647a4695b9762c

  • SHA512

    b748e2e9274de6db37b1f88ed2eee8dbb4ca0d8e33f678b330f276e2ea5fda4be9ab070e9aeb6956624ba733e19729e9394209e80b292acbf30b583bf69b3ca0

  • SSDEEP

    6144:ouc0IW5YmMHQk8dvqFxizeSmb1jchHLS/M4gHD5G3klroDfrEwpmF0grh6:ojQk8d1zNL4Cs4oDrNpYvh6

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1