General
- Target Nursultan.exe
- Size 3.4MB
- Sample260720-p3cnfaax6r
- SHA256 904bde56444f6f28857c427c782ab2f41a3a97fff62e00fdc8ddb45c20a662f6
- MD5 5a2fe50cdcde691f4d49e1d7f8bb5a05
- SHA1 bac3ff65191e7f3a8de78b00b8115d4c5b3e36af
- SHA512 bfaf7963b7e752ab86ddb9a07386cb7b9854a0f72aba67ddb97cc8c9694c74fb905740320bc8154fe07b0e9c11fb96bf4f87b47e947e469a5e3c9ce521cd1807
- SSDEEP 98304:oKo6e1j2BlH7auXp9Oh6u/ddSL+/GCS8uH:oKo6Ba+Ocu/TSL+/GCe
- TLSH T150F5337E81C0F13DE2C31F799649BE8A87781A73D941CBA9C7304BE289169D0641DE7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Nursultan.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nursultan.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Nursultan.exe
- Size 3.4MB
- SHA256 904bde56444f6f28857c427c782ab2f41a3a97fff62e00fdc8ddb45c20a662f6
- MD5 5a2fe50cdcde691f4d49e1d7f8bb5a05
- SHA1 bac3ff65191e7f3a8de78b00b8115d4c5b3e36af
- SHA512 bfaf7963b7e752ab86ddb9a07386cb7b9854a0f72aba67ddb97cc8c9694c74fb905740320bc8154fe07b0e9c11fb96bf4f87b47e947e469a5e3c9ce521cd1807
- SSDEEP 98304:oKo6e1j2BlH7auXp9Oh6u/ddSL+/GCS8uH:oKo6Ba+Ocu/TSL+/GCe
- TLSH T150F5337E81C0F13DE2C31F799649BE8A87781A73D941CBA9C7304BE289169D0641DE7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.