Overview

overview

8

Static

static

1

URLScan

urlscan

http://salinewin.exe

macos-10.15-amd64

Resubmissions

04/09/2026, 03:36

260904-d52jssbl8z10

04/09/2026, 03:36

260904-d5182axwct

04/09/2026, 03:19

260904-dvcspa1djc6

04/09/2026, 03:09

260904-dnp5fabj7z7

04/09/2026, 03:00

260904-dhb1maxsc18

03/09/2026, 04:36

260903-e8ae6aycmf8

03/09/2026, 04:28

260903-e311xsybqg8

03/09/2026, 04:08

260903-eqexxsak2x8

03/09/2026, 04:07

260903-ep1g8stxcw4

20/06/2026, 12:12

260620-pc65csfz5s8

Sharing

Copy URL Twitter E-mail

General

  • Target
    http://salinewin.exe
  • Sample260903-e311xsybqg
Score
8/10
defense_evasiondiscoverymacos

Malware Config

Targets

    • Target
      http://salinewin.exe
    Score
    8/10
    defense_evasiondiscovery

    • Path Permission

      Adversaries may modify directory permissions/attributes to evade access control lists (ACLs) and access protected files.

      defense_evasion

    • Gatekeeper Bypass

      Adversaries may modify file attributes and subvert Gatekeeper functionality to evade user prompts and execute untrusted programs. Gatekeeper is a set of technologies that act as layer of Apples security model to ensure only trusted applications are executed on a host.

      defense_evasion

    • File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks