Extracted

• • Target
    2026-08-10_8f5dbec3901e567822656c0a551fc2ba_amadey_elex_emotet_smoke-loader_stop
  • Size 496KB
  • SHA256 8160a21b11a70f9d9d0503e14b3580489437d5789c1eb4ffb9aa3eac70ffbe87
  • MD5 8f5dbec3901e567822656c0a551fc2ba
  • SHA1 25706d9d4e84f5c864241ee390330e96eb0f9d06
  • SHA512 b7e6419471fb8dc7f24a4dc86b0f8aae96105704ccabafba998880ba77e9773843a4f0613d95ae4c5c167f3628e0f88f351616d469c7842725c22085ff352597
  • SSDEEP 6144:SitfYa0luXelkywq62kxISbSLak+bAy/W4LxN/oFPO9R5/w:Sittjyw9xISWLL+VLX/X9
  • TLSH
    T1F6B4491127F4853BF6F3273219B9625A9A76FE53AE3681CF17503A5E9C30A909D30723
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2