General

  • Target
    OxideLoader.exe
  • Size 26.1MB
  • Sample260702-pbfwsaf15l
  • SHA256 bb2eb28ca95f78e579e89a5e8760e4d00b4e2ac1669473ac16e6e9b7fd3cbf74
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      OxideLoader.exe
    • Size 26.1MB
    • SHA256 bb2eb28ca95f78e579e89a5e8760e4d00b4e2ac1669473ac16e6e9b7fd3cbf74
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect SalatStealer payload

    • Family: salatstealer

      SalatStealer is a stealer that takes sceenshot written in Golang.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks