General
- Target tambik_squad.zip
- Size 6.4MB
- Sample260621-cmcbhsb16z
- SHA256 b51140cada9dfd0f0065461398a2a97582e4b1975a72551a6c345506789cf252
- MD5 f37df73d1eafd42f7c6144e4a132b42b
- SHA1 2bfee8a48b3e7e4070b226f23276b659ebd62bb7
- SHA512 a461cbdb94a018fccb53d80f427c0ccc0dca65ff613b7d12f977436ef7a9d7d935e3a663d23034f9937f400e16d25a5b4bf8c47381aa09b951f9cce2751ad939
- SSDEEP 98304:T3e7bOKjEW7hL35sb8AYU5Fb1T9ms3c2L0emhRO+iKuDtBa4gKxDLCqmSEXB+VvK:T3FKj1JJezrFb99rMC07OjJBC0Xgs1vC
- TLSH T147663384F0D109A9F7CD1B0648BAF3D6023EFF574066647AA1B190B287259BCF52E3D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tambik_squad.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tambik_squad.zip
Resource
win11ltsc2024-20260618-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tambik_squad/TambikSquad.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
tambik_squad/TambikSquad.exe
Resource
win11ltsc2024-20260618-en
5 signatures
150 seconds
Behavioral task
behavioral5
Sample
tambik_squad/libTAMBIKv2.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target tambik_squad.zip
- Size 6.4MB
- SHA256 b51140cada9dfd0f0065461398a2a97582e4b1975a72551a6c345506789cf252
- MD5 f37df73d1eafd42f7c6144e4a132b42b
- SHA1 2bfee8a48b3e7e4070b226f23276b659ebd62bb7
- SHA512 a461cbdb94a018fccb53d80f427c0ccc0dca65ff613b7d12f977436ef7a9d7d935e3a663d23034f9937f400e16d25a5b4bf8c47381aa09b951f9cce2751ad939
- SSDEEP 98304:T3e7bOKjEW7hL35sb8AYU5Fb1T9ms3c2L0emhRO+iKuDtBa4gKxDLCqmSEXB+VvK:T3FKj1JJezrFb99rMC07OjJBC0Xgs1vC
- TLSH T147663384F0D109A9F7CD1B0648BAF3D6023EFF574066647AA1B190B287259BCF52E3D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target tambik_squad/TambikSquad.exe
- Size 3.4MB
- SHA256 7e7ef5b1cc82799cff8ac357bc6f7b3e5c1bfc4275b0c93da61db7e458d611e8
- MD5 4e9def021931e28ae897bcb608b537db
- SHA1 ae588dce549e626c8e4f48a59a774d6340f6d9e0
- SHA512 c860c4b9a4f1033d55b6c3da9fe64f870aeb47a87dce7fe63e24163ca3d0cf40fb14782f5d5c6390d0845baf30b782fc1663f186fb4987b2ecfdd54f866e6223
- SSDEEP 98304:uWa3rTPf3V/GaurmP1jDvQ8FIrygnddybYX9p4:u3rTHQaqm9w+YDrta
- TLSH T1C3F5339611B70779EA2052B07F86B6C9588B0E738593183097EFA7395E3ECD453AF708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
- Target tambik_squad/libTAMBIKv2.dll
- Size 7.6MB
- SHA256 ce81a0abfae10c96d304445dc1c1e79a881f10e429da39bd81fd99a489e8ebb0
- MD5 463613417ce9b42fab3633bb5b148c61
- SHA1 4e31ac47a39321e7008996905b7754a9f5c24a3d
- SHA512 e66f75a8d670e1282420aa596aa7c1fd45cded833327548d9ac5727d896acc0ee58492197bc866c3ff4b08989a78c680bdba81f2c80eba7e0b7eb65c8eb624a8
- SSDEEP 98304:fXQ27zNwptqCK5M8twgfM+P9hKBswndb1GXJij:r7zEwPP90XdQi
- TLSH T15E868B03F39A40D9D04DE2B8C7579626FA35B8850724B6CF279413292F67BE0EB7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10