Extracted

• • Target
    2026-08-06_d018cc0c53aefa3e8e64bf0d1dffe927_amadey_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader
  • Size 1.8MB
  • SHA256 9590c27d12989061a7f07c60fb134ccc6d407fc24dd1c92cd85c784f8d263557
  • MD5 d018cc0c53aefa3e8e64bf0d1dffe927
  • SHA1 a74ca71886ab008fac2ee587f582dcbcaca79128
  • SHA512 9c490333184b019505b200c8bf8f7e8a11e122502aa76d35bd32d8bbf5209353c403ee894b16dd0e4bd09374c0700000d91938a83fff5379209d0b6fc07710cc
  • SSDEEP 49152:9wPtx1p+nqw4GuAHaksNCc2CDezCp/W9k/9qT8Lk:8t/Aqw4GRHaWc2C9W9k/
  • TLSH
    T1FD85BF02B78184B3E892117552B797775E3AEA30032AC1D7E7D12E696D302D2763E3DB
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2