General
- Target ichanger.exe
- Size 77.0MB
- Sample260702-kd2h2sew8w
- SHA256 cd39bd665ad4a3913ead1dc86d13da2c38aa5ea79207b1958ee2d2c0a3f8bd38
- MD5 1cc0c72140edeaedf181dc7d4ffd869d
- SHA1 0ac62bede8cb0a8f8fd9315d4ec754ff8af08f3c
- SHA512 8582907db3fdd6c4d70b7ab6ad1b3eb43f1f6c1729609749d1def18734e7fd7f3a4b7905e03bc5163171dc98b0cf0a153fb9ecd10f42198fd4d6c811331d33e4
- SSDEEP 1572864:occJ7SIGzBCIWiClEgBuaU1Bug2ywgEX1cGYfGsh37MjmRJhH5MUYbxtHTp12i:BKjGzBVLU9BK6gZwgEX1lYfGArMjmRHi
- TLSH T1180833E2A384C6C4F07B4535B4CD7612639A787FA7A60D53A391868230F31D9FFB9681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
ichanger.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ichanger.exe
Resource
win10ltsc2021-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
ichanger.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
ichanger.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target ichanger.exe
- Size 77.0MB
- SHA256 cd39bd665ad4a3913ead1dc86d13da2c38aa5ea79207b1958ee2d2c0a3f8bd38
- MD5 1cc0c72140edeaedf181dc7d4ffd869d
- SHA1 0ac62bede8cb0a8f8fd9315d4ec754ff8af08f3c
- SHA512 8582907db3fdd6c4d70b7ab6ad1b3eb43f1f6c1729609749d1def18734e7fd7f3a4b7905e03bc5163171dc98b0cf0a153fb9ecd10f42198fd4d6c811331d33e4
- SSDEEP 1572864:occJ7SIGzBCIWiClEgBuaU1Bug2ywgEX1cGYfGsh37MjmRJhH5MUYbxtHTp12i:BKjGzBVLU9BK6gZwgEX1lYfGArMjmRHi
- TLSH T1180833E2A384C6C4F07B4535B4CD7612639A787FA7A60D53A391868230F31D9FFB9681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Loads dropped DLL