General
- Target salarixi-1.1.1-windows.msi
- Size 15.1MB
- Sample260801-tml96asybx
- SHA256 dc117862bd349e0e41d3870802b9657e7c984723c82043334f5f43e2e227bf5a
- MD5 c1f5c9ff0a62eb5ad58454c0f70fb495
- SHA1 403d46481be9e254307554d6ac132437e296dbe0
- SHA512 e04cff87983543f37f6306388c4861fa315e2ffe820bd6a6d713a2c856250fc174e814ca7da2bbb7705370f4b4fa19e231dcaa3a92ab87b01fdcc5eefe3998db
- SSDEEP 393216:7pT+DT8XQfNjNSbfLbzHZvpPfNi/oa7HWAJmidRRP8MCkslu:78Tbfq/ntpPfwzNgibRPDzR
- TLSH T1DEF63307BE468260C4225DFF49368B708674BFA4651A3422266473B9CFF6DD10EF69CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
salarixi-1.1.1-windows.msi
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
salarixi-1.1.1-windows.msi
Resource
win11ltsc2024-20260709-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target salarixi-1.1.1-windows.msi
- Size 15.1MB
- SHA256 dc117862bd349e0e41d3870802b9657e7c984723c82043334f5f43e2e227bf5a
- MD5 c1f5c9ff0a62eb5ad58454c0f70fb495
- SHA1 403d46481be9e254307554d6ac132437e296dbe0
- SHA512 e04cff87983543f37f6306388c4861fa315e2ffe820bd6a6d713a2c856250fc174e814ca7da2bbb7705370f4b4fa19e231dcaa3a92ab87b01fdcc5eefe3998db
- SSDEEP 393216:7pT+DT8XQfNjNSbfLbzHZvpPfNi/oa7HWAJmidRRP8MCkslu:78Tbfq/ntpPfwzNgibRPDzR
- TLSH T1DEF63307BE468260C4225DFF49368B708674BFA4651A3422266473B9CFF6DD10EF69CE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2System Binary Proxy Execution
1Msiexec
1