Analysis
-
max time kernel
140s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
31/03/2025, 06:49
General
-
Target
Webrat.exe
-
Size
3.1MB
-
MD5
ab72c094d55767bb1557620b282f84d2
-
SHA1
3484a5a8907dca900facc8d3b8508e1578cbac92
-
SHA256
fe0e093058074512febd0db6385e626eb256208b498e5ad948fb6a9fad43ab00
-
SHA512
dfb805998ea119a97e4f5ff304602dcf2395a65e0e2d8151259ce6d6549439b18d327ed8d154fe8bdb70bcbba3d7c77365c6d853efef16d20a66c326fbe70b38
-
SSDEEP
98304:vtTGBq2qTQKaf7newOM5ZFoTi8yf1WDq/:vABDTf7ewOM5ZFIyfAD
Score
10/10
Malware Config
Signatures
-
Detect SalatStealer payload 14 IoCs
-
Salatstealer family
-
salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
UPX packed file 15 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Webrat.exe"C:\Users\Admin\AppData\Local\Temp\Webrat.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB
-
Filesize
11.5MB