85b2a1b25802e85b2ea98746362df55de1eef30b713a5c6992b38c11cc6051cb | Triage™

Login
Reports

Overview

overview

7

Static

static

3

SalleBrowser.exe

windows10-2004-x64

6

SalleBrowser.exe

windows11-ltsc_2024-x64

6

Update.exe

windows10-2004-x64

3

Update.exe

windows11-ltsc_2024-x64

3

current/Mi...re.dll

windows10-2004-x64

1

current/Mi...re.dll

windows11-ltsc_2024-x64

1

current/Mi...ms.dll

windows10-2004-x64

1

current/Mi...ms.dll

windows11-ltsc_2024-x64

1

current/Sa...er.exe

windows10-2004-x64

1

current/Sa...er.exe

windows11-ltsc_2024-x64

1

current/Sa...er.exe

windows10-2004-x64

7

current/Sa...er.exe

windows11-ltsc_2024-x64

6

current/Velopack.dll

windows10-2004-x64

1

current/Velopack.dll

windows11-ltsc_2024-x64

1

current/We...er.dll

windows10-2004-x64

1

current/ru...er.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
SalleBrowser-win-Portable.zip
Size 2.7MB
Sample261011-rh95baba47
SHA256 85b2a1b25802e85b2ea98746362df55de1eef30b713a5c6992b38c11cc6051cb
MD5 e25335c06141915039587490c0bf7999
SHA1 5a89c110450e76f8e06ade91b41d2c43100aee35
SHA512 3f7585e4f7c7388930545e935515e5ec0912ba9a7fa810ff8aad4eb528299a85b4ae2d5f838a8b94b08773deeeb6ea5294663d17c90a1001d95a133e149e59e6
SSDEEP 49152:7IYbvh7bBq/Ze6cmCm/27RXB91XtaPReCEPOtQU6NJaXI4ZwgzcYqE0tKt9+b7vy:7IYt/Byki27RX1daPRR6Q4jMcYqE0091
TLSH
T116D533185D4985BE2E427E74C0E88E7E0AD4F72D8B811B06D377B2EB9F4B3561212F64
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

SalleBrowser.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

SalleBrowser.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

Update.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Update.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

current/Microsoft.Web.WebView2.Core.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

current/Microsoft.Web.WebView2.Core.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

current/Microsoft.Web.WebView2.WinForms.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

current/Microsoft.Web.WebView2.WinForms.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

current/SalleBrowser.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

current/SalleBrowser.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

current/SalleBrowser.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral12

Sample

current/SalleBrowser.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral13

Sample

current/Velopack.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

current/Velopack.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

current/WebView2Loader.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

current/runtimes/win-x64/native/WebView2Loader.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  SalleBrowser.exe
- Size 414KB
- SHA256 2c5681a9bfd76c7e5f37df1488fea54c2e035050bc34613b58f407be4d886376
- MD5 7c18982e92380bc6d276db78c0d71aa3
- SHA1 a36415c0832f46f1b2b42fff56e9c19de6a11fdc
- SHA512 f39e9d4c994e71c0c0ed1b5e7f697975f43752a87affdfa91d2ee8112d6defe2b9a268c02830100c4b47ed7517a69798f6d1d5681c745f6534f7527c8ca2aee9
- SSDEEP 12288:6SJJkYLauS67aQ2UWIgXgCtgLz1uXe+OuhKDxiKgMZB8eSr:BuuS6eeQXe+XTMs
- TLSH
  T17594AE52BF40C0B7D04740719D3DE73ECB3BA1161B119EE7B3E509989E35BA04E366AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  Update.exe
- Size 3.7MB
- SHA256 2e5571843da85979547ff6f501a9011f7c8c9a9e0b4e6b03d813291f26990541
- MD5 9fd7fb1f91b5d3cc103d590f8b76b1e3
- SHA1 2c05aba4998bc6884ae0f8cb3215ec89dce02f08
- SHA512 40330229f92bf90cb87103ab30455a55a85db8a148ab50432d67cbc355621be6217813c6636fd9362daae71e71866cdad8756f1842d9e0b97ca27d97977895a3
- SSDEEP 49152:E0z1f+viTnGsRHs8jVrr3TZlzW1qmHVpFkSZ5:/+v0ntHsOnaH
- TLSH
  T14306AE62FF42D0FBC48A01B5E42DF37D9636A2558B6A85C392A94C4C6CE13B09C5739F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  current/Microsoft.Web.WebView2.Core.dll
- Size 681KB
- SHA256 24b1a6be3a7956e00d0509d4eaebf08e418fc219e964b6c269d2e04439333685
- MD5 ae915341870f891f090228905277064c
- SHA1 749ebcdf4be274d7777124bd081f093403941cce
- SHA512 aa3f2efed0a7e91dbfae414f344f41ca8a5ea5ab05d93436526c6360676e962969e1f29c3e05d428de07571bc5e774cd091af05d5fd3826f564ffcdb4f56f0bb
- SSDEEP 12288:GJ4dCXzRKX4EcJupbSRi461R1VDrP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNI/:GJ4dCXzRKX4EcJAD1RvQy
- TLSH
  T1F9E4301223FD8619F5F27FB9997412609BBABC97BD78C34D0698642D0D72B819DA0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  current/Microsoft.Web.WebView2.WinForms.dll
- Size 38KB
- SHA256 fa6b956e42cbc9368d57e062e819d1dc65bdea5f67f3bbf2c004c3e88a3c222b
- MD5 67d687e9756f000f5fd4a70928d1495a
- SHA1 5263bdf3260fe95ad71a5cdaff3bb2b85e287669
- SHA512 475fb6a0bd25e597b21abbf3f42f8d698fec2f1804550d0e6ffa472c4d42b2d5b5824fdac131d8548e1f9a1030c3c4c9c3aca5ae9025c555991f13764834e22c
- SSDEEP 768:JcaNb2/itGt3JrbYbSQzZDgcEST3p4Jjrjh2je+SG2au8vxJKia5/Zi/wGQSxKFH:Hb2/D8mQzZDgcEST3p4Jjrjae+SG2auD
- TLSH
  T110033D4083ECC527F6EF1E78A9B486A2077ABEC37DA1D7990DC5F0990C7379056213A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  current/SalleBrowser.dll
- Size 142KB
- SHA256 acc0dff436b244547d612653b74754c5f5e944b57ec168af04f51ce00ce4bedf
- MD5 d70b8d4b29bcdf245a2b486811628597
- SHA1 991834d895ef6e47c9c4fa04c742fb1ce0fe58ad
- SHA512 49d011236a486fae0456f32d5037e5687a015dfdab4163e0d8d6e9eed9bce3ff63f3bd861b1da4e119b15e0189e12b8d8931bf34343721241431664f6d02f6d1
- SSDEEP 3072:RnxCrbScVCZTf1KJPAr77m7ea5ceA6j3DsjFf6Tydx7/n/Kdydx7/na:BcyXD1KJPO77m7ea5ceA6j3Dsjp6er/1
- TLSH
  T1FAE3AE6133BCC92FC6BF95FD513541510BF29693A222EBE54D8930FD29A33A0A5423DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  current/SalleBrowser.exe
- Size 179KB
- SHA256 a6b11b2a8030fe67366727d0ac66073e30581a65da9cba2e32cb1dfd9099b2a7
- MD5 83d8c5240118abfb4259ae758898567e
- SHA1 e87bb9fdd11e355013e9b8b9dd0b578f6631213d
- SHA512 646a967403c61c3dd98f22ec2b9bf7e531e248057f38cffc499b0763a7173e4a33350861aa00c2ad63c0dfb156e62f4c706419b780a7d02be79fe3b65f91bd74
- SSDEEP 3072:8qeXA/4yIg9vkNPNu6H6xCYOiEUE265tJ/eHydx7/nB:8vgvkNFNaxm0ENJ/eSr
- TLSH
  T1DC045C07E6A850BDE1B6C679CDA24D41FB7378598B71A6CF03504AB61E73BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral11 behavioral12
- Target
  current/Velopack.dll
- Size 261KB
- SHA256 b35698f5f66978d7bfd0ab12a2a2899f05912d9a1890d5e64c2dce9bacf2662f
- MD5 2c29bf1bcfe53f779a9f7d785601dc8a
- SHA1 21d134bb5661ebbb4819500aaf829ccfa024a9b4
- SHA512 3acfa65169390a7f9af8ac66dfa9684405bcfcc4e61fc04df80ee3bfa25bea4bc8a41defd7fb9290890285172a97f663d95774a59e274fbcd1f8b5f44d533692
- SSDEEP 6144:qo0g6Hxg1smn4oGalxcB+KQwCyknZylyZ8Sru:qLgAiWHoq9CykclyZz
- TLSH
  T17A445B0037F48716E2FF6F79FCB0600686B5FA07B8AAE75D0A8458ED1D633509950BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  current/WebView2Loader.dll
- Size 160KB
- SHA256 239a9d6614a6cfade62b47cdb0be36e3069eedc438c3e0647a9e7b7c84ef6ea0
- MD5 cce1332e0af440bc54fdf04eb543d4a0
- SHA1 c7f6c049ff3eee4ed337a98d3163fbb5c4686ff7
- SHA512 3484febcb142beac708faa1775699450ff22f5ce13b7e90da4d6d27ac9bbedd1c2477dc33125cbcce00fc7d59d416588300fa7b3c1c607bda0d1e874cb0425a9
- SSDEEP 3072:qjAuqhU/3A5evuBdyoioiVO7kKlU9tKTTnhTEtJI8w6lKIc:36642lioiVOAqnpEtJs6W
- TLSH
  T1ADF35C57B3E500BBE1B7C27885A74A46EB7678111B609AEF0364433A1F237D0AE3D761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  current/runtimes/win-x64/native/WebView2Loader.dll
- Size 160KB
- SHA256 239a9d6614a6cfade62b47cdb0be36e3069eedc438c3e0647a9e7b7c84ef6ea0
- MD5 cce1332e0af440bc54fdf04eb543d4a0
- SHA1 c7f6c049ff3eee4ed337a98d3163fbb5c4686ff7
- SHA512 3484febcb142beac708faa1775699450ff22f5ce13b7e90da4d6d27ac9bbedd1c2477dc33125cbcce00fc7d59d416588300fa7b3c1c607bda0d1e874cb0425a9
- SSDEEP 3072:qjAuqhU/3A5evuBdyoioiVO7kKlU9tKTTnhTEtJI8w6lKIc:36642lioiVOAqnpEtJs6W
- TLSH
  T1ADF35C57B3E500BBE1B7C27885A74A46EB7678111B609AEF0364433A1F237D0AE3D761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

defense_evasiondiscoverytrojan

behavioral12

defense_evasiondiscoverytrojan

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy