General
- Target hotkey.exe
- Size 3.4MB
- Sample260627-pdwd9abs4l
- SHA256 dc20f1aecf0b8b3f90c27bb031bda2e66857695f0a7cd17772cc78ee5d005499
- MD5 e4c93a17d78d5039002e0450016b7086
- SHA1 875a5c708919b1a049836e8d9cce44bec520b10e
- SHA512 2e4e85ab0583aad8e4eefb6a9c03f84d1f6f4b736e45cc3dff4f981036e9ed6d3d2a5af2fd02255921b47eb7281e9370a3070d3db72726df302b5fb5a7e9718f
- SSDEEP 98304:Uz9rX4mcfo8OzBngsANFoJ79vCvaPE5GDR9nuw6AT:mL4szhgsAQZ9vxE5GDR9nr
- TLSH T1B9F533699A9094B6DEF4F5F04F99C432434F4B05303FDBAB39799D4BC954A862282CF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
hotkey.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
hotkey.exe
Resource
win11ltsc2024-20260618-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target hotkey.exe
- Size 3.4MB
- SHA256 dc20f1aecf0b8b3f90c27bb031bda2e66857695f0a7cd17772cc78ee5d005499
- MD5 e4c93a17d78d5039002e0450016b7086
- SHA1 875a5c708919b1a049836e8d9cce44bec520b10e
- SHA512 2e4e85ab0583aad8e4eefb6a9c03f84d1f6f4b736e45cc3dff4f981036e9ed6d3d2a5af2fd02255921b47eb7281e9370a3070d3db72726df302b5fb5a7e9718f
- SSDEEP 98304:Uz9rX4mcfo8OzBngsANFoJ79vCvaPE5GDR9nuw6AT:mL4szhgsAQZ9vxE5GDR9nr
- TLSH T1B9F533699A9094B6DEF4F5F04F99C432434F4B05303FDBAB39799D4BC954A862282CF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting