General
- Target salinewin1.5.zip
- Size 202KB
- Sample260727-snnnyavhra
- SHA256 6ae2e736bcd1c612314ea49facd22f08753c6047763e7b62ef7abef9aa9d7ba9
- MD5 065a26b3f9570081f54201dad1bdc0e2
- SHA1 e311decefee96fc9afc2e96ccdedbb7b6bf5a6ab
- SHA512 a5710b30641d22db9fc2174d1f4151c76d50274df064207f5817fb80f4d5fc3411621b54d5775da3973b607c228a7ad58b6a02b79a6fd56ac0ae7bb56aa0e706
- SSDEEP 6144:oxNMcpOY7qY2Hglyi6x5LSBDdmz0DpQL/5:oxNMcpNWY2HEyF4/rw
- TLSH T186142375488F32D2E0A633C622DD06240D79C95F7333DD35C6F8BA5A6CD50296E42E2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
salinewin1.5-safety.exe
Resource
win11ltsc2024-20260710-en
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
salinewin1.5-safety.exe
Resource
win10v2004-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral3
Sample
salinewin1.5.exe
Resource
win11ltsc2024-20260710-en
5 signatures
900 seconds
Behavioral task
behavioral4
Sample
salinewin1.5.exe
Resource
win10v2004-20260513-en
5 signatures
900 seconds
Malware Config
Targets
-
- Target salinewin1.5-safety.exe
- Size 245KB
- SHA256 bafd3d712a32b884001dccd7f6f77fd9aa515b254352310e20f67026364c7884
- MD5 e69d64dfc3d809dc8dbdda9c367b0afc
- SHA1 dc61951ccd463291bb2e2758fc8afebaa8ffadcc
- SHA512 d5e644ab734168d5f42028a6196aba091a60b8536e0101e15254ecc154f564b495f4d66d948399cd4de42f19423cb500a8f8b90d59652fb31e68f1375e28def5
- SSDEEP 3072:3WiJUpGuEy1AXy4e5II5CoTbLYiBZP5pHQpYR95WPNp/H:GBpduiPRZPPHQpY35WPNpf
- TLSH T127347D21B5C1C4F1F97945356836C9910E6AFC36AF501EAF3298332F0E751E2453AEAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target salinewin1.5.exe
- Size 279KB
- SHA256 fbdaec9e16cb120887975def752432ff798834d521cfc87b24923bf6d3acfe4a
- MD5 7c4230a18208485741aa283707ce3a96
- SHA1 30d637688d60697379405272d6665bd8965d175f
- SHA512 81eebfa2f3ccffd8fe4714b6685760727c6c397ba27ea50b298777b8321a899dd94b49b0456e32072392249924fa1949daf5296be49d2c7827db1d36d6d56808
- SSDEEP 3072:qJ+qjy1h6nzfIIv2mGYndBO5CRNArWcMZuxo9AF3CrBZP5pHQpYR95WPNpHjcH:cDrIwBIrnCZPPHQpY35WPNpw
- TLSH T1F4547C11B5C1C4F1F97506366825CA910F6AFC359F905EAF3298332F0E751E2853AEAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.