Extracted

• • Target
    2026-08-04_57ce555609e5ffeee8ee49bb9041f689_elex_rhadamanthys_stealc_stop
  • Size 364KB
  • SHA256 cccb49261b3832f09e90393b239cdac3b8301ec689b7bc9fdcc05c233c9f5ee0
  • MD5 57ce555609e5ffeee8ee49bb9041f689
  • SHA1 fdd9de02fa505b49f5f79978fc37e9c3235008eb
  • SHA512 786c9627e49b7b5d04e6c791c600f8f64cfce29627001afa7a13a9daacdfcf4ded5c953a9967172c9b1e16effc68c720dd86918a53d6fddd55c9a5c4c8ce0ba7
  • SSDEEP 6144:GaJ1PnQJbwszjRz7qora2n2z4+zUkvvTBYB1wkG7p9fo6TfR1kVKxF:11PnSbweFzWga2n2z8kvvT2VG7pLzLkA
  • TLSH
    T13184CE30B6C0C433D9B6153889E9CB7A6A39B9204B75C4C7B7D81B795E603E297353CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2