General

  • Target

    Salad-1.4.7.exe

  • Size

    469.2MB

  • Sample

    240508-t135tsfh74

  • MD5

    c19933a518c668c416c57524c90d9446

  • SHA1

    bf02c8155ef1ba83713b3c27cf6839a214b303d5

  • SHA256

    947b87276f2891f7307bf5141e86574e8c969006e32fd42c5ff11c187c36a030

  • SHA512

    290164d26dc63821f2e54f28523ee233419be97cbfe8c2ad67a3f1f4f5b91492d22522df02a6794bf2ff520f95cd9c60d251d9cb482d681f2d5962fe73627833

  • SSDEEP

    6291456:NParhYPwHQaTB2Hy5sUCvr4CsuJOk21GfzYsGyur/qQqBwZqUXOmhbR9P99fZdB8:Zal0wHrTMAZCsdYzYs8tZlXFhN199F8

Malware Config

Targets

    • Target

      Salad-1.4.7.exe

    • Size

      469.2MB

    • MD5

      c19933a518c668c416c57524c90d9446

    • SHA1

      bf02c8155ef1ba83713b3c27cf6839a214b303d5

    • SHA256

      947b87276f2891f7307bf5141e86574e8c969006e32fd42c5ff11c187c36a030

    • SHA512

      290164d26dc63821f2e54f28523ee233419be97cbfe8c2ad67a3f1f4f5b91492d22522df02a6794bf2ff520f95cd9c60d251d9cb482d681f2d5962fe73627833

    • SSDEEP

      6291456:NParhYPwHQaTB2Hy5sUCvr4CsuJOk21GfzYsGyur/qQqBwZqUXOmhbR9P99fZdB8:Zal0wHrTMAZCsdYzYs8tZlXFhN199F8

    Score
    5/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to get system information.

MITRE ATT&CK Enterprise v15

Tasks