0f8ddaa2bc8e8fbf2d12d88e76a80b8aa5b671c28c3e6c9271dbbe646fd3ff0e

Login
Reports

Overview

overview

Static

static

SaladBoots...ad.dll

windows7-x64

SaladBoots...ad.dll

windows10-2004-x64

SaladBoots...o.html

windows7-x64

SaladBoots...o.html

windows10-2004-x64

SaladBoots...ad.dll

windows7-x64

SaladBoots...ad.dll

windows10-2004-x64

SaladBoots...ain.js

windows7-x64

SaladBoots...ain.js

windows10-2004-x64

SaladBoots...bat.js

windows7-x64

SaladBoots...bat.js

windows10-2004-x64

SaladBoots...fee.js

windows7-x64

SaladBoots...fee.js

windows10-2004-x64

SaladBoots...cpp.js

windows7-x64

SaladBoots...cpp.js

windows10-2004-x64

SaladBoots...arp.js

windows7-x64

SaladBoots...arp.js

windows10-2004-x64

SaladBoots...csp.js

windows7-x64

SaladBoots...csp.js

windows10-2004-x64

SaladBoots...css.js

windows7-x64

SaladBoots...css.js

windows10-2004-x64

SaladBoots...ile.js

windows7-x64

SaladBoots...ile.js

windows10-2004-x64

SaladBoots...arp.js

windows7-x64

SaladBoots...arp.js

windows10-2004-x64

SaladBoots.../go.js

windows7-x64

SaladBoots.../go.js

windows10-2004-x64

SaladBoots...ars.js

windows7-x64

SaladBoots...ars.js

windows10-2004-x64

SaladBoots...tml.js

windows7-x64

SaladBoots...tml.js

windows10-2004-x64

SaladBoots...ini.js

windows7-x64

SaladBoots...ini.js

windows10-2004-x64

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
16/01/2025, 02:03

Sharing

Copy URL Twitter E-mail

Static task

static1

5 signatures

pyinstaller pysilon

Behavioral task

behavioral1

Sample

SaladBootstrapper/Salad.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

SaladBootstrapper/Salad.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

SaladBootstrapper/bin/Monaco.html

Resource

win7-20240903-en

windows7-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral4

Sample

SaladBootstrapper/bin/Monaco.html

Resource

win10v2004-20241007-en

windows10-2004-x64

8 signatures

150 seconds

discovery

Behavioral task

behavioral5

Sample

SaladBootstrapper/bin/Salad.dll

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

SaladBootstrapper/bin/Salad.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

SaladBootstrapper/bin/vs/base/worker/workerMain.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral8

Sample

SaladBootstrapper/bin/vs/base/worker/workerMain.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral9

Sample

SaladBootstrapper/bin/vs/basic-languages/bat/bat.js

Resource

win7-20241023-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral10

Sample

SaladBootstrapper/bin/vs/basic-languages/bat/bat.js

Resource

win10v2004-20241007-en

windows10-2004-x64

10 signatures

150 seconds

discovery execution

Behavioral task

behavioral11

Sample

SaladBootstrapper/bin/vs/basic-languages/coffee/coffee.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

SaladBootstrapper/bin/vs/basic-languages/coffee/coffee.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

SaladBootstrapper/bin/vs/basic-languages/cpp/cpp.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

SaladBootstrapper/bin/vs/basic-languages/cpp/cpp.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

SaladBootstrapper/bin/vs/basic-languages/csharp/csharp.js

Resource

win7-20241010-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

SaladBootstrapper/bin/vs/basic-languages/csharp/csharp.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

SaladBootstrapper/bin/vs/basic-languages/csp/csp.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

SaladBootstrapper/bin/vs/basic-languages/csp/csp.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

SaladBootstrapper/bin/vs/basic-languages/css/css.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

SaladBootstrapper/bin/vs/basic-languages/css/css.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

SaladBootstrapper/bin/vs/basic-languages/dockerfile/dockerfile.js

Resource

win7-20240729-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

SaladBootstrapper/bin/vs/basic-languages/dockerfile/dockerfile.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

SaladBootstrapper/bin/vs/basic-languages/fsharp/fsharp.js

Resource

win7-20241023-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

SaladBootstrapper/bin/vs/basic-languages/fsharp/fsharp.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

SaladBootstrapper/bin/vs/basic-languages/go/go.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

SaladBootstrapper/bin/vs/basic-languages/go/go.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

SaladBootstrapper/bin/vs/basic-languages/handlebars/handlebars.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

SaladBootstrapper/bin/vs/basic-languages/handlebars/handlebars.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

SaladBootstrapper/bin/vs/basic-languages/html/html.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

SaladBootstrapper/bin/vs/basic-languages/html/html.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

SaladBootstrapper/bin/vs/basic-languages/ini/ini.js

Resource

win7-20241010-en

windows7-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

SaladBootstrapper/bin/vs/basic-languages/ini/ini.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

execution

Report Analysis Logs

General

Target
SaladBootstrapper/bin/Salad.dll
Size 6.2MB
Sample250116-cgymkawkhs
SHA256 b2f73faae3e8f343eef01cc87efb889a33357faa0c749a4bfe04b1df6a7571e4
MD5 42fe6e4b1feb2c9c50ae78a0e15ab9ed
SHA1 74b11462a0b3f67750a4fb7899009acdf58db664
SHA512 d77ffbccd5f84bf81569dbf21d712f77f6a90042cc49b8ddd119e1ab52e25e7dd2d62563677a3f1f0b16136bb0707eee1c132f4b1702c883f7ee5d8d3d11a536
SSDEEP 98304:jY+RSMlSw1AwIpYsiVZ+eYbFNjX1Nu6I:MGSMlSw1ArYsiVZ+eYbFNbTRI
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
540	rundll32.exe
540	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SaladBootstrapper\bin\Salad.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:540

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads