Extracted

• • Target
    2026-09-01_44cdd484064d7fdeab5cedfb9c414743_amadey_elex_rhadamanthys_smoke-loader
  • Size 176KB
  • SHA256 fc3db467106de159b367dc9b5cf2ddc8c6e43fb2a75ac91bca451592438aed1f
  • MD5 44cdd484064d7fdeab5cedfb9c414743
  • SHA1 ee571c272588e47d1b1393935a8a01d6122a04dc
  • SHA512 654b061df6204eafdd7c866fd819554d9de040d9839a0a7867f7e0687fd6b6abf1b9f98973ef1713166bb2e689a8c77b9e68d3a5228775956ffdde0486cba390
  • SSDEEP 3072:z5OUr3XNUNjzmtlI+3KF9m5aHi6FmV3S7nO29sxxXn1jL:z5Oy3XNUxrsKlHimmV32O2GxX1jL
  • TLSH
    T1A604CF023A60D0B2E01154B5D989DBF95372BC12CA65C9837BC47F9F3BB62D09A3A356
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2