Extracted

• • Target
    2026-07-20_26610900dcd1f6b398e561baa3226ea1_coinminer_elex_jaku_nymaim_rhadamanthys_wannacry
  • Size 236KB
  • SHA256 06db05ac9ab2e0f174e5dae71d42c762a1146a9242dad3121a24fdf7f84b0df9
  • MD5 26610900dcd1f6b398e561baa3226ea1
  • SHA1 5b0dea6f9dd31d11186d88b0e6d2288c35be0e28
  • SHA512 acb4deba7490bd44c5977e15583e2c79ab30c673ec4cd7cbc18cffc752d1a79b1fec12a6d4355654fdc7d139b7b028689de060e6544a67515e8487b2ecb03750
  • SSDEEP 6144:x7dqcWxc5tTBsJWKFGUOfCr9yBdeVBRYNf2OdZx:BQpxc5tTG7FE6pyB+RTKZx
  • TLSH
    T18034D0193AD048B2D06FD4B7C0D5BB38FB7632321322D84B779C96751E62762FA112DA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2