Sality
File-infecting polymorphic malware
Source Attribution
- Origin
- MITRE
- Source
- Microsoft WMDS
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Microsoft WMDS · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered Sality first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Sality is an aging polymorphic file-infecting malware family still spreading via removable media. (attributes recorded from Microsoft WMDS).
Definition
Sality is an aging polymorphic file-infecting malware family still spreading via removable media.
Overview
Sality is an aging polymorphic file-infecting malware family still spreading via removable media.
Behavior
- Polymorphic
- C2 over P2P
- bootkit variant
First Seen
2003-01
Target
File-infecting polymorphic malware
Malware Intelligence
Family: Sality
Techniques: T1070, T1106
Targets: File-infecting polymorphic malware
Behavior:
- Polymorphic
- C2 over P2P
- bootkit variant
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.