General
- Target Flex.zip
- Size 3.4MB
- Sample260716-xsbbmafy41
- SHA256 1ea4fd60ce4a1773880cc8d4beb9f34cc15ef5ed14a7b032bee9b4fbc24ef783
- MD5 e24646749dc29e209217e3a8d3f81a72
- SHA1 4060ceea8498fd4dd83f8d94a908074eefc90105
- SHA512 5bddd4606d8cf044b2f4c0027e81260f23756d750d3f40366cfa86b99cdee7c1c24ee395a1a215b47af69662d5d076ac2e67d1606927a44853df184363603f36
- SSDEEP 49152:D3Kc6vtWjePrrb/QPvWlj+Nvays49quaQgDnYUpvzU2Rn8IFLauQTaWe/uPHE7oR:WcSTAU65spuaQgbvr8V7e/uPH6pM5
- TLSH T135F5338F61F64875F801469BEB333EC9A7B41FAEBC4C9814C94E917B001D6E16DC6B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Flex.exe
Resource
win10ltsc2021-20260513-en
18 signatures
300 seconds
Malware Config
Targets
-
- Target Flex.exe
- Size 3.4MB
- SHA256 ea001701e5eb868ce0dbd4b3b884307f5f5bd5d43f1f551bdfee0c7c818e413c
- MD5 5eb3e2b163e5c93b7774401a203aed61
- SHA1 34b8c29cf0796b6cbe94e67994d7596a9f69df9e
- SHA512 3bd579310f75286e78141f2a3391e653a40530b6d100c6b410b576a6e601eebcd7831596c4a829c53ffe557f08a55cc718a773bc8f91d4664b561ef4848fe54c
- SSDEEP 98304:MLmxwfKQe6b6lf3/2zPVqdf5ty1Lb62RyLWcd7YY:LWKQZOlf3uzPVqdHQ9yL5dU
- TLSH T184F533DC6F82C580C2DB05FFABC5F753B3AE6261AD59B64BB1C31267DAD03846D90184
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Adds Run key to start application