General
- Target OxideLoader.exe
- Size 26.1MB
- Sample260702-pbfwsaf15l
- SHA256 bb2eb28ca95f78e579e89a5e8760e4d00b4e2ac1669473ac16e6e9b7fd3cbf74
- MD5 9805bf219a1e8fdfb20f49aa354af20a
- SHA1 d3b69fd7854b34712bedff00db594680e79bdc01
- SHA512 0552801493f47b902d7b668e49673113577890fd32cc891632816abe8765322dd63a35c85d4414e20b89410d0ce35a09d6db91b0f8f05cc6083c48faaf7f1651
- SSDEEP 49152:wLL7gZ6SQ/tCIqhjNu5jbKgCm4glaxDYlCsxk+ZvvdxVTivhRlxgDu5mA5RXnhoH:k
- TLSH T140578C7FC13B0827AE9B67C58C591ACEDC4CE7512710646966AD188EC728EBFC0E1637
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OxideLoader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
OxideLoader.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target OxideLoader.exe
- Size 26.1MB
- SHA256 bb2eb28ca95f78e579e89a5e8760e4d00b4e2ac1669473ac16e6e9b7fd3cbf74
- MD5 9805bf219a1e8fdfb20f49aa354af20a
- SHA1 d3b69fd7854b34712bedff00db594680e79bdc01
- SHA512 0552801493f47b902d7b668e49673113577890fd32cc891632816abe8765322dd63a35c85d4414e20b89410d0ce35a09d6db91b0f8f05cc6083c48faaf7f1651
- SSDEEP 49152:wLL7gZ6SQ/tCIqhjNu5jbKgCm4glaxDYlCsxk+ZvvdxVTivhRlxgDu5mA5RXnhoH:k
- TLSH T140578C7FC13B0827AE9B67C58C591ACEDC4CE7512710646966AD188EC728EBFC0E1637
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE