Extracted

• • Target
    2026-07-09_28141e8c74fb41c5eb231d79e5b6ed1e_elex_glassworm_maze
  • Size 1.2MB
  • SHA256 c79cf40943cfeddebe4ffc1b18fd6b12797040de5c37e9b67d6616dc635b433c
  • MD5 28141e8c74fb41c5eb231d79e5b6ed1e
  • SHA1 325a92eb835cafbe95bdad54030e571cb52b111f
  • SHA512 6eda3848d7a3342a59d918588eb4d317f714f55eb29bc28c3b2cc4d330d11fd5c788cfd73ff5f9440833e650de6e559696982cadf2988f22047cac28877ce43b
  • SSDEEP 24576:RpEd+nwD4SNSO9bBGq8OhEHqZgixvq/U+iIRYcAH3Dk9YLB7TS58Gt5/z+ExLSTT:bn3K7Gq8OhEHXtUFdphGZlLfouB79T6J
  • TLSH
    T189457E22BA81B037C27316725DAFA11E52BC7E740730944B674C293C6EB59E3BB6135B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2