Extracted

• • Target
    2026-10-03_bf9e2ebc1362f2cb2cafe6cef67ddd23_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
  • Size 1.3MB
  • SHA256 78448a93e7fdd312dfc40cd5a549a292aa26f72806446d65c16044e0606b3f20
  • MD5 bf9e2ebc1362f2cb2cafe6cef67ddd23
  • SHA1 6381da30c21a22bcdb25ae1ebe3fb29a9121e220
  • SHA512 a6a4f78a5fdb0844cc7bc425bb5de32f2efd73b9806c9fe7d4f6a9275b3cd10191cff63c4bf835b921848a431488b575cb650398d1cd8ea151bddd42a09fdda1
  • SSDEEP 12288:cml5a6EdGQgUmR7G9QK3wJx+qSfF0tDPoMMsYw:jlT+mRW/3wJxfSfePoMMp
  • TLSH
    T10365BF11B5D180B3E9B3193409F4AE759EBDB9310B158A7F63E84B6D1F306C29226B73
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  backdoordefense_evasiondiscoverysalitytrojanupx

  • Family: Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • Modifies firewall policy service

    defense_evasion

  • UAC bypass

    defense_evasiontrojan

  • Windows security bypass

    defense_evasiontrojan

  • Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality

  • UPX dump on OEP (original entry point)

  • Windows security modification

    defense_evasiontrojan

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2