Extracted

• • Target
    2026-08-14_83d620de4db3172a15fb9a94e9476bac_elex_stop
  • Size 615KB
  • SHA256 2ed75305f6b37356ab283fa41f822b5c3fc313e362f53516b99d737243660cf7
  • MD5 83d620de4db3172a15fb9a94e9476bac
  • SHA1 4950230821b48e9d6961084754dd8d5ee40f5168
  • SHA512 1548858e65623a1c87060e6a6e179804ee7c50dbb670d83d172d116422c9d67a79e974b3383ecbfc703c0761a38801781802cd915765749dee32e2baf8553ff8
  • SSDEEP 12288:fMl23+mvm27FPL/Nr5IpoL9KEiLQXCsqn6eVhFnvtdn7D1EA:fMl23+mmuKvLQXCs+6eVhFvKA
  • TLSH
    T10ED4AE0279D08737E24562BA8B13D72B2AB77CF41468944BB9D036B93E34352E72875F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2