Analysis
-
max time kernel
104s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
28/03/2025, 12:41
General
-
Target
45d3a72c-6a50-4a81-a3b9-ace908c38512.exe
-
Size
3.1MB
-
MD5
d2998eec163b24057fea5d9c556a3fa6
-
SHA1
dbfa6f3cfa42cbd13d26301e7a92784ef6f9b158
-
SHA256
25168e4761ae95b5db1235c9434e25227c6e0f79043072b7009f716b6d7f87f2
-
SHA512
7f6dd63823232813522eb345b78aad3c0bddd48d8afe55ab5219f6409c54164cbb6fdfb8d1de5223545deba49277cf5bec471bb6a4290b9ae0e08b78b44f66bd
-
SSDEEP
49152:f/afhObtGmV2MAHzLRzg//QJreFRc79R6llmh3szKBq7113VdRq9vOUohWG+:f0hi2MAH+//AeFRc7XEEBG19Vqo0G+
Score
10/10
Malware Config
Signatures
-
Detect SalatStealer payload 1 IoCs
-
Salatstealer family
-
salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\45d3a72c-6a50-4a81-a3b9-ace908c38512.exe"C:\Users\Admin\AppData\Local\Temp\45d3a72c-6a50-4a81-a3b9-ace908c38512.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.5MB
-
Filesize
11.5MB