General
- Target Peepcracks-setup.rar
- Size 3.5MB
- Sample260619-yr9y8sbs8n
- SHA256 e86795e1d4a7c3d56716a7c31858cc47856b11994816314eea9bee7a8dab2f96
- MD5 0f61220ea64cc108bf271922f77b4f04
- SHA1 d39304d6c5dc8c2a730fa5aae54fc0cbd707d32a
- SHA512 604cb385031580e1abbfad281d945e9ed0b8e15d5bbfa9eeafa9c372b2e61081ac860c0fe7cc0d2104d0e2af2eb93b5aa5b9f7831678adfaf3f69245234ba71f
- SSDEEP 49152:p+v4I7Wg8DDqRRjnhy/tL3w1cSwaStN6SiyfsrIOUfSKPEdrzjF9eAk2g:p+77VXR5mJSRyUJUlPEdrzjW
- TLSH T1ED0633AE2CFACF7D268889340470544F7443C35DB888F732E42B1AC64A2F65E6965DDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SynInstallerV2.exe
Resource
win11-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target SynInstallerV2.exe
- Size 3.6MB
- SHA256 0b8cae277bf0e3f0f33c5c44e5fd0dac50278086dd5769f9d96c44d748d8a90b
- MD5 72cc8e3d5bb03a4ee445735a529f2e58
- SHA1 951bf64ab8bb44148d29ea2ad3499f706d55e711
- SHA512 355f5ed0a2f2224206c69e66faffb95cc4e34eb7e512b47ae023b5f7f7b3b233cc1fe78a2599d1d5cd21ce4971fab9115258dddf8ee98ee0c8a1debd5bf72949
- SSDEEP 98304:IVVMMrfvgSSg+g5NjyIwf1OyIwZ8FoKHb57:QVMMr15+gPnHTwtK757
- TLSH T17606330B695045F9CC858D30C3959776A23274970B251EFB2BF0B0BD7AFA8E15AB2770
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
UAC bypass
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
1