Extracted

• • Target

    2025-04-05_8c270007995c173c153aac8bd051b290_icedid

  • Size

    390KB

  • MD5

    8c270007995c173c153aac8bd051b290

  • SHA1

    4516869a4eda0fd33833997426d466c134c1c960

  • SHA256

    ecaa8910f93d792e7327cdb9a573da22150024d9d9bc5b37d4a0bf1491e2f9cf

  • SHA512

    79fd123234ae9a6a1200b9a1fb7113abb3672368d523a95f754299c5c968b99b4ac4e36fedf9e86da4811d0ae5fb4b9784c295eff3e25cd5fdeb1a16056323aa

  • SSDEEP

    6144:CznAtGqS5NjM2KbQbNYuhZ+6+eAbuQ5Zu60HnPLhDKWK7zDIUiLn9FUdBn:CTLnp+BCQ5Zu60HnP1CzRiT9FUzn

  Score

  10^/10

  salitybackdoordefense_evasiondiscoverytrojanupx

  • Modifies firewall policy service

    defense_evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Sality family

    sality

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1