General
- Target Mira.exe
- Size 3.4MB
- Sample260707-tpvdjshv6s
- SHA256 5a2b52b3140bdfc1df04fe753b82571e7066431e8da2ae9e10d5bbc5dbf6b6ed
- MD5 2d8d8beb7311b2fc3fcc055638475110
- SHA1 55d15ceefb2150c90d260935990c69d152c146be
- SHA512 b7af0b63d5483e62867d31dd563f26d5f856ae27295bb6a4523707e5b0decebd97954e58c59fc9c2fab3e4b5d6b6b8b7f629c280b7fab089b6aad05f2b6d9c1f
- SSDEEP 98304:5ADIVilKCkE112qEAGqmG924dyl4BNXzVrx:MsCkoS34ndDz9x
- TLSH T1C9F533B2404B5E23F1EE9877A29B749B5AE560B702166DBBB232F48035FB7730853C54
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Mira.exe
Resource
win11-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Mira.exe
- Size 3.4MB
- SHA256 5a2b52b3140bdfc1df04fe753b82571e7066431e8da2ae9e10d5bbc5dbf6b6ed
- MD5 2d8d8beb7311b2fc3fcc055638475110
- SHA1 55d15ceefb2150c90d260935990c69d152c146be
- SHA512 b7af0b63d5483e62867d31dd563f26d5f856ae27295bb6a4523707e5b0decebd97954e58c59fc9c2fab3e4b5d6b6b8b7f629c280b7fab089b6aad05f2b6d9c1f
- SSDEEP 98304:5ADIVilKCkE112qEAGqmG924dyl4BNXzVrx:MsCkoS34ndDz9x
- TLSH T1C9F533B2404B5E23F1EE9877A29B749B5AE560B702166DBBB232F48035FB7730853C54
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting