General
- Target xda3080a9e85e1ef30502c2268482ad7e7a2ee6ff129e6544b11d4d78e77b669d.exe
- Size 11.1MB
- Sample260605-2gexwsew51
- SHA256 da3080a9e85e1ef30502c2268482ad7e7a2ee6ff129e6544b11d4d78e77b669d
Score
10/10
Malware Config
Targets
-
- Target xda3080a9e85e1ef30502c2268482ad7e7a2ee6ff129e6544b11d4d78e77b669d.exe
- Size 11.1MB
- SHA256 da3080a9e85e1ef30502c2268482ad7e7a2ee6ff129e6544b11d4d78e77b669d
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Drops file in System32 directory