Extracted

• • Target
    2026-08-01_54afaf115f09346e14755a602adc5cb6_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
  • Size 920KB
  • SHA256 f89baeb587d512c7dc38873b763a93e15af0532a8d3708e5bc6230788614f239
  • MD5 54afaf115f09346e14755a602adc5cb6
  • SHA1 abf2e13ff03ad012594799e37abe76103108c93d
  • SHA512 94b367d3de1000d74f661634a92d35e1dcd3baedd81463c01eca85b2b563aaf0d41871e0d20c8da5619105544460dd87ccb2f83c94ddba005880bfe278a39846
  • SSDEEP 24576:QRVPH9QJOlMvgOzqr0XvgdGJgNW/hZQbOjxehw:6x9CjgOurzd6QbOFeS
  • TLSH
    T1DA15BF22FAD18072D563143002A66F369DBEBA310921D9CFE7D41A5D5E305E0BB3B7A7
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2