General

  • Target
    https://cdn.discordapp.com/attachments/1513632342047195196/1515445220244983909/Aiaimv1.exe?ex=6a4d5a58&is=6a4c08d8&hm=18987fcd84cb107b79cab5e7af93fb3c9f1af9272ddc4be71253cf16d5820da8&
  • Sample260707-d9z7jaet2q

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1513632342047195196/1515445220244983909/Aiaimv1.exe?ex=6a4d5a58&is=6a4c08d8&hm=18987fcd84cb107b79cab5e7af93fb3c9f1af9272ddc4be71253cf16d5820da8&
    • Detect SalatStealer payload

    • Family: salatstealer

      SalatStealer is a stealer that takes sceenshot written in Golang.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks