Extracted

• • Target
    2026-08-21_2e295f35b36521c83a6603f6b685f406_elex_stop
  • Size 623KB
  • SHA256 ad8e40eb17b793dececa553feeb0253c5776aa149056f0f61631aa41c76b9100
  • MD5 2e295f35b36521c83a6603f6b685f406
  • SHA1 af9117400dfaebb1610d1ea10993b261ada91492
  • SHA512 de8685cbd5f7746aba4910ffaf783b0cc64c3645e5767829913d3eb5e22fd1472deebc1c77c7504dddffb1a132ce0fed44a3fdac94d6a82042c456b410f05f6e
  • SSDEEP 12288:/Ml23+mvm27FPL/Nr5Ip2L9KEiLQXCsqn6eVhFnvtdn7DRQbIu+U:/Ml23+mmYKvLQXCs+6eVhFvGJv
  • TLSH
    T142D4AD1279C08337E14562BA8B13DB6B2AB77CB41468944BB9D036B93E34752E73874F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2