hxxp://salinewin[.]exe | Triage™

Login
Reports

Overview

overview

8

Static

static

1

URLScan

urlscan

http://salinewin.exe

windows11-ltsc_2024-x64

Resubmissions

04/09/2026, 03:36

260904-d52jssbl8z10

04/09/2026, 03:36

260904-d5182axwct

04/09/2026, 03:19

260904-dvcspa1djc6

04/09/2026, 03:09

260904-dnp5fabj7z7

04/09/2026, 03:00

260904-dhb1maxsc18

03/09/2026, 04:36

260903-e8ae6aycmf8

03/09/2026, 04:28

260903-e311xsybqg8

03/09/2026, 04:08

260903-eqexxsak2x8

03/09/2026, 04:07

260903-ep1g8stxcw4

20/06/2026, 12:12

260620-pc65csfz5s8

Sharing

Copy URL Twitter E-mail

General

Target
http://salinewin.exe
Sample260904-dhb1maxsc1

Score

8^/10

bootkit defense_evasion discovery persistence ransomware

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://salinewin.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

21 signatures

900 seconds

bootkit defense_evasion discovery persistence ransomware

Malware Config

Targets

- Target
  http://salinewin.exe
Score

8^/10

bootkit defense_evasion discovery persistence ransomware
- Disables RegEdit via registry modification
  defense_evasion
- Disables Task Manager via registry modification
  defense_evasion
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

bootkitdefense_evasiondiscoverypersistenceransomware

© 2018-2026

Terms | Privacy