General
- Target rustcheaker-main.zip
- Size 3.4MB
- Sample260621-mpceeacx9p
- SHA256 9f39b6e4876fb23130d8351af2098c83c50ad5a60530f18b7b912051b00a29b5
- MD5 c9a7ad649fc4bddde345955c60e7d33e
- SHA1 d0175aec6360df1f3675aa62bf577188e9a40c23
- SHA512 81103cc31a919b8a8eb9b5da14908e790ff5de06e99458f82603639775399ce7f6eebec0c5c370427714cc2b637ec5ca616bb3ae18365760c31d439af4192b9e
- SSDEEP 98304:RIzt+FV09kytL/BvgDIGIKVhPnS28ByAv/TNR96h:RIz4FV09kyt7BIEqDP0yADNS
- TLSH T174F53360EA1C68BB31CD6835001E8D776ED3179CB8B7FADC50DEA68724F0F896604D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
rustcheaker-main/rustchek.exe
Resource
win11-20260513-en
14 signatures
300 seconds
Malware Config
Targets
-
- Target rustcheaker-main/rustchek.exe
- Size 3.4MB
- SHA256 20db48cc708ec07e856c604dfca126719c121fc07b714a4ca6c620c500f9febb
- MD5 a09922c0c71991fa7563cbd8f7eb7072
- SHA1 587b2db31ebb6f8526c127663749c2a409bcd5e8
- SHA512 6a8edd1bb3f51f3bd350e0b5568204db884bf0a9816322861cd2fee31d4a3fb136f80af390357c934cdd3483de61ac7d2fa7b0b1b1f74ce7d669eeb0a0c438bb
- SSDEEP 98304:zkNjIT90JQ4NHpDniD2qyS9xjhmo8Vgcvjvhb9w:zkNkT90JQ4NJDiSUvdMgcLh
- TLSH T1CFF53360DA1C68BBB1CD6835001E8D776ED3179CB8B7FAEC54DEA59710F0F892604E26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting