Overview

overview

10

Static

static

5

Webrat.exe

windows7-x64

10

Webrat.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Webrat.exe

  • Size

    3.1MB

  • Sample

    250331-hls6jaxmv7

  • MD5

    ab72c094d55767bb1557620b282f84d2

  • SHA1

    3484a5a8907dca900facc8d3b8508e1578cbac92

  • SHA256

    fe0e093058074512febd0db6385e626eb256208b498e5ad948fb6a9fad43ab00

  • SHA512

    dfb805998ea119a97e4f5ff304602dcf2395a65e0e2d8151259ce6d6549439b18d327ed8d154fe8bdb70bcbba3d7c77365c6d853efef16d20a66c326fbe70b38

  • SSDEEP

    98304:vtTGBq2qTQKaf7newOM5ZFoTi8yf1WDq/:vABDTf7ewOM5ZFIyfAD

Score
10/10
salatstealerdiscoverystealerupx

Malware Config

Targets

    • Target

      Webrat.exe

    • Size

      3.1MB

    • MD5

      ab72c094d55767bb1557620b282f84d2

    • SHA1

      3484a5a8907dca900facc8d3b8508e1578cbac92

    • SHA256

      fe0e093058074512febd0db6385e626eb256208b498e5ad948fb6a9fad43ab00

    • SHA512

      dfb805998ea119a97e4f5ff304602dcf2395a65e0e2d8151259ce6d6549439b18d327ed8d154fe8bdb70bcbba3d7c77365c6d853efef16d20a66c326fbe70b38

    • SSDEEP

      98304:vtTGBq2qTQKaf7newOM5ZFoTi8yf1WDq/:vABDTf7ewOM5ZFIyfAD

    Score
    10/10
    salatstealerstealerupxdiscovery

    • Detect SalatStealer payload

    • Salatstealer family

      salatstealer

    • salatstealer

      SalatStealer is a stealer that takes sceenshot written in Golang.

      stealersalatstealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks