General
- Target Setup.exe
- Size 3.4MB
- Sample260718-taq3ksas61
- SHA256 e1f89981a34240aadaffdb661008f462962aaa01030ae04a6cbc05def486ee3c
- MD5 5d6d7c80442f84e2cb1289d7731c8a80
- SHA1 6d8e64d34eef97463c4574101125cbe25a6dcc3d
- SHA512 5d87d8d260c1bc4543ea11bb73606866e198cdf378bb0e72b0e5e9e6dc3528252721879046f1d4c5141726ca90556a5cd40ea84c50315cd608629f135aa315f5
- SSDEEP 49152:gyVoBlMfJRmYCksTqrDc/wid9gFCRhvBG3W1hTdXu8hclsS/77PjUK3Ll8ogiovU:LoBn/Tf/QEhvA2TdXAGK3p8AAgYw
- TLSH T16BF5336C8A849C30F6BC7EF11A7C760F6010D37F84469AB746F418A616DD3E469AC26B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 3.4MB
- SHA256 e1f89981a34240aadaffdb661008f462962aaa01030ae04a6cbc05def486ee3c
- MD5 5d6d7c80442f84e2cb1289d7731c8a80
- SHA1 6d8e64d34eef97463c4574101125cbe25a6dcc3d
- SHA512 5d87d8d260c1bc4543ea11bb73606866e198cdf378bb0e72b0e5e9e6dc3528252721879046f1d4c5141726ca90556a5cd40ea84c50315cd608629f135aa315f5
- SSDEEP 49152:gyVoBlMfJRmYCksTqrDc/wid9gFCRhvBG3W1hTdXu8hclsS/77PjUK3Ll8ogiovU:LoBn/Tf/QEhvA2TdXAGK3p8AAgYw
- TLSH T16BF5336C8A849C30F6BC7EF11A7C760F6010D37F84469AB746F418A616DD3E469AC26B
- MD5 SHA1 SHA512 SSDEEP TLSH
Detect SalatStealer payload
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
Executes dropped EXE
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
Accesses cryptocurrency files/wallets, possible credential harvesting