salatstealer | 4cfe278f7f93048d0e247a301f43fdfac738ac3e5b62c8d445d7f5241c69103a

Sharing

Copy URL Twitter E-mail

General

Target
BotMonster_v2.8.zip
Size 4.2MB
Sample260712-flcsfacz5j
SHA256 4cfe278f7f93048d0e247a301f43fdfac738ac3e5b62c8d445d7f5241c69103a
MD5 723d78767b974fa6f8cf9136b9724c1a
SHA1 61f67d5e84bc187a699afc1d8479aa15f7861d0a
SHA512 9c03788c631f3008fd31873a5f7f26c8c8c348ffdee891332aafcba1b8d425d75e44984410dddd0c4e0ee6a5e5a91adb20db510832c992dbaa24c792cf269570
SSDEEP 98304:n2h7e7e4lGAfSLmSF0+5r6nhAQMJubbd5UW47te+rjs3n:21e7e0/fSiSmKr6h5/d5UWmjYn
TLSH
T1001633E0EEFF6D04D223817FA10694992E62FBD9607C95EE97A1E4C1C5F4393692B4C0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  BotMonster_v2.8.zip
- Size 4.2MB
- SHA256 4cfe278f7f93048d0e247a301f43fdfac738ac3e5b62c8d445d7f5241c69103a
- MD5 723d78767b974fa6f8cf9136b9724c1a
- SHA1 61f67d5e84bc187a699afc1d8479aa15f7861d0a
- SHA512 9c03788c631f3008fd31873a5f7f26c8c8c348ffdee891332aafcba1b8d425d75e44984410dddd0c4e0ee6a5e5a91adb20db510832c992dbaa24c792cf269570
- SSDEEP 98304:n2h7e7e4lGAfSLmSF0+5r6nhAQMJubbd5UW47te+rjs3n:21e7e0/fSiSmKr6h5/d5UWmjYn
- TLSH
  T1001633E0EEFF6D04D223817FA10694992E62FBD9607C95EE97A1E4C1C5F4393692B4C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  BotMonster_v2.8/BotMonsterLaunher.exe
- Size 3.4MB
- SHA256 7e7ef5b1cc82799cff8ac357bc6f7b3e5c1bfc4275b0c93da61db7e458d611e8
- MD5 4e9def021931e28ae897bcb608b537db
- SHA1 ae588dce549e626c8e4f48a59a774d6340f6d9e0
- SHA512 c860c4b9a4f1033d55b6c3da9fe64f870aeb47a87dce7fe63e24163ca3d0cf40fb14782f5d5c6390d0845baf30b782fc1663f186fb4987b2ecfdd54f866e6223
- SSDEEP 98304:uWa3rTPf3V/GaurmP1jDvQ8FIrygnddybYX9p4:u3rTHQaqm9w+YDrta
- TLSH
  T1C3F5339611B70779EA2052B07F86B6C9588B0E738593183097EFA7395E3ECD453AF708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery salatstealer stealer upx
- Detect SalatStealer payload
- Family: salatstealer
  SalatStealer is a stealer that takes sceenshot written in Golang.
  stealer salatstealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  BotMonster_v2.8/bot_loader.dll
- Size 447KB
- SHA256 17c70f7c3e80812ec6f9e3c47215bc8a3fa8e34ebdcc5329d1a7815ce3bc7c44
- MD5 622389d5e1235eca8eb4a7b6e5121f88
- SHA1 363416b0855f8935505430b66cc414f4a7172d5b
- SHA512 1a5b0ce20346fe43a97f7109e418a93243175883ea0e0a26068936d375892901465e48f32607cef31615935ce4756c213791dad164fedb25b0e4e20ebb741c72
- SSDEEP 6144:kYgwl+/0uZgXSKl6qr9eTVtMZpA8IXJmpDXkxeq7T6ac:ki+/0uZgt6qvcltxeO
- TLSH
  T1D9A4281CAFE858A4D166C135D997A301E2B178646F11F7CF125086BE8FE3BD868387B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  BotMonster_v2.8/data/mapper.dll
- Size 817KB
- SHA256 254f32e153f83e5f32060d270402ecfbdd5ee0d9088276d81abd24c2e13ba7ea
- MD5 fc4ce1e98125e7e30af6bc2d4a10250d
- SHA1 cc7e3f18771a3944cb08eca03ae7d5062b911ffd
- SHA512 22f9eed7ed428b143cee4b798ad63d56880e2aba8454d62e56045afc9c2e86e64534a9431440ded5db0292626efe5f7891ef79bca629e93df9b8b699ce4cd525
- SSDEEP 24576:b5P4lGLbMMHMMMvMMZMMMKzb6XmMMMiMMMz8JMMHMMM6MMZMMMeXNMMzMMMUMMVd:bHMMHMMMvMMZMMMlmMMMiMMMYJMMHMML
- TLSH
  T199056C42F7C8D495E0B706318933CB654672FC659E20866F3199771E2E723C36AB2E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

adware spyware
behavioral6
- Target
  BotMonster_v2.8/data/sqmapi.dll
- Size 48KB
- SHA256 8c3c3ba91869d27872c3b373857fdf49d68e04cda1a0de39289cb56936fb78d3
- MD5 abb02cf4f95140471eed4adc012645ce
- SHA1 3651e7be8921661c55ba434e4620f19c455016be
- SHA512 4b480fffce172015d92424a835f0c2e1431cad41eb459b87a7da54947e749970fe9530921917fbc1155958bf138232deaebf7cc15f7c1c1863468a9ba3896685
- SSDEEP 768:DmuzodxqlL1ilAb+AxSeyoRTY8RYISZpoiq+ff9n6ee2jFgd1PfF29z4J:DfmUwtoRs5rff96OOLPfFCz4J
- TLSH
  T105237C86E3BC2095F1775778C165561BFA7636292B00E6EF0270C26C2F13BE49B34B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  BotMonster_v2.8/patcher.dll
- Size 219KB
- SHA256 3099b6cf67191b1a7e4d8463576fe85835e8df2296dba3470b0cd42babd336c8
- MD5 d831180f7596e0d2bb87b2cc57ecfca2
- SHA1 472a9d3f90a50222d4944c70422734f4955f15a1
- SHA512 879446f600f21135c6e0ed3df8991906f6213569f72f701cb97ce0acd52a1187e0a0faf484e50ed22ab8ea64d1217c65a2ff1b693aa06f5993532ca163f5a6b7
- SSDEEP 3072:VstD7trOt9pfslMYO9mXn9H0LeinObM6gZy5ChoTic:Vw1rOt9pdYamXnrdbMKw
- TLSH
  T129249DC3B44D64E4E8AA0935043E4C154A67BE9D0798299F36CB7B1E1FB72C36173A83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detect SalatStealer payload

Family: salatstealer

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8