Resubmissions
07/09/2026, 05:52
260907-gkvgjaxydv801/09/2026, 19:12
260901-xwwfzazygy801/09/2026, 18:33
260901-w7g72shq8s830/08/2026, 18:09
260830-wrm4csfn5s825/04/2026, 16:02
260425-tg4bgscz71825/04/2026, 15:58
260425-tel97afs3p825/04/2026, 15:49
260425-s9vz5sez4m814/04/2026, 23:15
260414-28scasbz6n13/04/2026, 09:46
260413-lrwqdsbz6w03/04/2026, 02:35
260403-c25xdaby5y8General
- Target salinewin.exe
- Size 283KB
- Sample260425-tel97afs3p
- SHA256 7163fefbf2f865ef78a2d3d4480532fffb979300d6f0a77b6f3fc5c4b0d2cada
- MD5 2b1e9226d7e1015552a21faca891ec41
- SHA1 f87fcbe10fa9312048214d4473498ad4f9f331ce
- SHA512 1852f6d05c9fca962178bc190bc8c90f0ca54ea99714480690f44417e49eee6c392579091ae8a6cd053ec47ad1980dbbbc0db3e0e00520ee1bdbadbf8dc9d69e
- SSDEEP 3072:HZVUJ58IAelkapH3shY6iEwgaBZP5pHQpYR95WPNpNMl3:nUJ5PzB5ZPPHQpY35WPNpGl3
- TLSH T10F547C10B5C0C4F1F87545366836CA910E6DFD399E601EAF3298736F0E751E2463BE6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
salinewin.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target salinewin.exe
- Size 283KB
- SHA256 7163fefbf2f865ef78a2d3d4480532fffb979300d6f0a77b6f3fc5c4b0d2cada
- MD5 2b1e9226d7e1015552a21faca891ec41
- SHA1 f87fcbe10fa9312048214d4473498ad4f9f331ce
- SHA512 1852f6d05c9fca962178bc190bc8c90f0ca54ea99714480690f44417e49eee6c392579091ae8a6cd053ec47ad1980dbbbc0db3e0e00520ee1bdbadbf8dc9d69e
- SSDEEP 3072:HZVUJ58IAelkapH3shY6iEwgaBZP5pHQpYR95WPNpNMl3:nUJ5PzB5ZPPHQpY35WPNpGl3
- TLSH T10F547C10B5C0C4F1F87545366836CA910E6DFD399E601EAF3298736F0E751E2463BE6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.