Resubmissions

23/02/2024, 10:06

240223-l5dfzafb34 8

22/02/2024, 21:32

240222-1dt2zafd3z 8

22/02/2024, 21:30

240222-1ctptaff92 4

22/02/2024, 21:25

240222-z9kmqsff58 8

General

  • Target

    salinewin.zip

  • Size

    203KB

  • Sample

    240222-z9kmqsff58

  • MD5

    19a966f0b86c67659b15364e89f3748b

  • SHA1

    94075399f5f8c6f73258024bf442c0bf8600d52b

  • SHA256

    b3020dd6c9ffceaba72c465c8d596cf04e2d7388b4fd58f10d78be6b91a7e99d

  • SHA512

    60a926114d21e43c867187c6890dd1b4809c855a8011fcc921e6c20b6d1fb274c2e417747f1eef0d64919bc4f3a9b6a7725c87240c20b70e87a5ff6eba563427

  • SSDEEP

    6144:AX0xX7MnBGkuOtEZlwuO2lJwz7EeQG+YSGL:AWXKuVZQ27oEhVYbL

Malware Config

Targets

    • Target

      readme.txt

    • Size

      318B

    • MD5

      d066989e7c3329ceee99b4461a31cad6

    • SHA1

      aba6ba54cfb19ac454bad9b18e75b86be1f8d625

    • SHA256

      a56b31136f7a822ca4e01d17728e1683989e440e6ccff7bf1ca0f282ef521648

    • SHA512

      2c9388f87a4b3a3582697b968d70463194c7475ae5502790299c4030762f09e6581e38b5c52fe0202bf61862cec6fd0e988c9f0689a78fa564c4b744c5be4e47

    • Disables Task Manager via registry modification

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks