salatstealer | 4cea7f2769e4397869ee4b85b23c8c50b972a1137614239c0e04482e8ae61874

General

Target
x4cea7f2769e4397869ee4b85b23c8c50b972a1137614239c0e04482e8ae61874.exe
Size 4.0MB
Sample260710-a3y44scx2v
SHA256 4cea7f2769e4397869ee4b85b23c8c50b972a1137614239c0e04482e8ae61874
MD5 7ea6b5cf7eac17a5826f2ff6ea81110e
SHA1 4806b419f996ee94e73b78143e5399a01fc197d9
SHA512 a82be1a7c63a83f63f0d3f7a7b3a1ff19fb935376aaf4cfb2071e9933a2b65cd5165aa800f88cf1f31aa40d1ab4f980c5f78075740763b9ebfb41739d4924c59
SSDEEP 98304:YJpdOBAMfz7U2NNG94om5/JVgobqugref6qaScPedZx+KAf33:YfMnr7U2NNS4ochOoec6EcPi+KAv3
TLSH
T13316330FB7A970E4F4F7F63680762906F769BC740A74A72B16C64B210E266829D1CF35
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  x4cea7f2769e4397869ee4b85b23c8c50b972a1137614239c0e04482e8ae61874.exe
- Size 4.0MB
- SHA256 4cea7f2769e4397869ee4b85b23c8c50b972a1137614239c0e04482e8ae61874
- MD5 7ea6b5cf7eac17a5826f2ff6ea81110e
- SHA1 4806b419f996ee94e73b78143e5399a01fc197d9
- SHA512 a82be1a7c63a83f63f0d3f7a7b3a1ff19fb935376aaf4cfb2071e9933a2b65cd5165aa800f88cf1f31aa40d1ab4f980c5f78075740763b9ebfb41739d4924c59
- SSDEEP 98304:YJpdOBAMfz7U2NNG94om5/JVgobqugref6qaScPedZx+KAf33:YfMnr7U2NNS4ochOoec6EcPi+KAv3
- TLSH
  T13316330FB7A970E4F4F7F63680762906F769BC740A74A72B16C64B210E266829D1CF35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

credential_access discovery salatstealer stealer upx
- Detect SalatStealer payload
- Family: salatstealer
  SalatStealer is a stealer that takes sceenshot written in Golang.
  stealer salatstealer
- Executes dropped EXE
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1

T1552

Credentials In Files

1

T1552.001

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detect SalatStealer payload

Family: salatstealer

Executes dropped EXE

Unsecured Credentials: Credentials In Files

Drops file in System32 directory

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2