General

  • Target
    salinewin1.5.zip
  • Size 202KB
  • Sample260727-snnnyavhra
  • SHA256 6ae2e736bcd1c612314ea49facd22f08753c6047763e7b62ef7abef9aa9d7ba9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      salinewin1.5-safety.exe
    • Size 245KB
    • SHA256 bafd3d712a32b884001dccd7f6f77fd9aa515b254352310e20f67026364c7884
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      salinewin1.5.exe
    • Size 279KB
    • SHA256 fbdaec9e16cb120887975def752432ff798834d521cfc87b24923bf6d3acfe4a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Disables RegEdit via registry modification

    • Disables Task Manager via registry modification

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v16

Tasks