General
- Target FIX.exe
- Size 3.4MB
- Sample260606-n246mac13x
- SHA256 24e4edf1c4fce9ad3907447c49241465c0d4424c19716af1ad288d33e55d6726
- MD5 e76712cff2e7c66d74094b4dbbe905a0
- SHA1 ae6d6633ec9880dbf09978f0cd78da4896630893
- SHA512 8a9db2d04dc4dc0d053a17ad7665eca7c4a2b357af1c773e3b4d7a42c829b9f3fed09f62389d4499f49472b720db781287b00bce4f7ecc48216980e56ac62814
- SSDEEP 98304:RMvGMj2EJK5DcqPcJp428vJgjJHNlKjbBC:6h2E059kPB8v6HNSbQ
- TLSH T109F533463852A12ACDD8F37AD2CEAB6F70D352926BDD98CEB449C50A5EE4FC3462D140
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
FIX.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
FIX.exe
Resource
win11-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target FIX.exe
- Size 3.4MB
- SHA256 24e4edf1c4fce9ad3907447c49241465c0d4424c19716af1ad288d33e55d6726
- MD5 e76712cff2e7c66d74094b4dbbe905a0
- SHA1 ae6d6633ec9880dbf09978f0cd78da4896630893
- SHA512 8a9db2d04dc4dc0d053a17ad7665eca7c4a2b357af1c773e3b4d7a42c829b9f3fed09f62389d4499f49472b720db781287b00bce4f7ecc48216980e56ac62814
- SSDEEP 98304:RMvGMj2EJK5DcqPcJp428vJgjJHNlKjbBC:6h2E059kPB8v6HNSbQ
- TLSH T109F533463852A12ACDD8F37AD2CEAB6F70D352926BDD98CEB449C50A5EE4FC3462D140
- MD5 SHA1 SHA512 SSDEEP TLSH
Detect SalatStealer payload
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
Executes dropped EXE
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
Accesses cryptocurrency files/wallets, possible credential harvesting