Resubmissions

09-11-2024 15:37

241109-s2fkgszmfn 4

09-11-2024 15:34

241109-szwtpazmdp 1

09-11-2024 15:24

241109-ss7bvaxclk 8

09-11-2024 14:25

241109-rrqf9svpaw 8

General

  • Target

    https://github.com/pankoza2-pl/salinewin.exe-Malware/commit/551397166ce887cb59f7c27a25f4c819154064b7#diff-435ae535a9504830f325f84416607094945443192acf5ae7a2997d961d03fc4d

  • Sample

    241109-ss7bvaxclk

Malware Config

Targets

    • Target

      https://github.com/pankoza2-pl/salinewin.exe-Malware/commit/551397166ce887cb59f7c27a25f4c819154064b7#diff-435ae535a9504830f325f84416607094945443192acf5ae7a2997d961d03fc4d

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks