Extracted

• • Target

    2025-04-05_bf35858a3d5a89b3c1b9d5fd33f63c30_amadey_rhadamanthys_smoke-loader

  • Size

    279KB

  • MD5

    bf35858a3d5a89b3c1b9d5fd33f63c30

  • SHA1

    2891524d6b5fba354e2c1e4afd2e47705f37e3ac

  • SHA256

    8fa2e6fa5210af25ae0b8084376485753cb7b3fc8b4ea782a63ebb2522cdff25

  • SHA512

    30b4edc8f7a2a95778c4446b9ade0729aa58d1354e6c03a744be33ce274e8a6b3a55a6f25aaf55ecfd5b7990287ffc79386103f477e1c8bb717921a35cbc461f

  • SSDEEP

    6144:oNOFqakWDkXofKEZmCzwOlRzi9i7ng+33i1FpN2/2ItMc27ZW8z:oNOFq2DxhZlz9hi9ynx3yXO/2ItMc27J

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1