General
- Target Xenos.zip
- Size 20.1MB
- Sample260709-wpkkfsfz5x
- SHA256 c144fd0c9ee115aa91990dea1f8cbfc295d5ac0c13f4b9fbfe8d6f95f35368ed
- MD5 453bc316f6c663fc72aa0f7ad24f6e3e
- SHA1 43ca9b782de3d606762a9c79650d39ded459e259
- SHA512 949796849aeebd014473e03dbdea96777222768910fbb858dcd1e4dbb3be1c58160e2a6c6b56c5badd20d98f91a6d0d9056596e5dfc42a33cace604a952dcc4e
- SSDEEP 393216:sq0nR5YBj7PDkbcRWHoDSAfsy+RBXZxsuuEMTKNDlq5ebW1eLT:snRKfobckHGlfsvR9ZxMFeNDlq5Szf
- TLSH T1AD27334E447C1476E691F9BED013AC761F59A35FEAA26C4EB2896A2C73007C8F14BCC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Xenos.zip
Resource
win11ltsc2024-20260709-de
19 signatures
300 seconds
Malware Config
Targets
-
- Target Xenos.zip
- Size 20.1MB
- SHA256 c144fd0c9ee115aa91990dea1f8cbfc295d5ac0c13f4b9fbfe8d6f95f35368ed
- MD5 453bc316f6c663fc72aa0f7ad24f6e3e
- SHA1 43ca9b782de3d606762a9c79650d39ded459e259
- SHA512 949796849aeebd014473e03dbdea96777222768910fbb858dcd1e4dbb3be1c58160e2a6c6b56c5badd20d98f91a6d0d9056596e5dfc42a33cace604a952dcc4e
- SSDEEP 393216:sq0nR5YBj7PDkbcRWHoDSAfsy+RBXZxsuuEMTKNDlq5ebW1eLT:snRKfobckHGlfsvR9ZxMFeNDlq5Szf
- TLSH T1AD27334E447C1476E691F9BED013AC761F59A35FEAA26C4EB2896A2C73007C8F14BCC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1