General
- Target GeoGessHck2.zip
- Size 3.4MB
- Sample260729-q1ssbavgra
- SHA256 726179d1cc5b0c387bfb7960f88483ada43694d54fc3d6eefb660d25be42a4a7
- MD5 b5a368b75e3bc493b63cebec553cfa66
- SHA1 900fa08576ce6b081d9a28ccfda622cd8287c42e
- SHA512 00f01ef45c274e4f72d64a140e72da497e6a58fa61a79519e10c0e4bf8b7480b52f9e6d30d7a80a492c36fc401ac644b20f171f51697b8223a0ce75b568a816f
- SSDEEP 98304:YwqWUDEgMppwTzyV6355hWysncwwHHMkoSS:YgpK3yVKTWyewHHMwS
- TLSH T169F533C97A35426CEA645FBCBD38F1DA3456ABE9A13BDDC20510841E827C533F28E635
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
GeoGessHck2.exe
Resource
win10v2004-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
GeoGessHck2.exe
Resource
win11ltsc2024-20260709-en
13 signatures
300 seconds
Malware Config
Targets
-
- Target GeoGessHck2.exe
- Size 3.4MB
- SHA256 c0797de159abbfd1388db0ab3f58a46b1e2ae1f018658ffb2a6fb1ba0b2381b0
- MD5 20fa183d3778f11615fc70959881bb93
- SHA1 d903f25f10b2ecb0c03bc1a0ad05eefff2e6dc3f
- SHA512 57a6fead0f103bb370cfa4f2ae9fc69e7e4affe798a8f5ad80bce350476b40126186be76dd2dd08440862201ee6d18a0a05747eb73caed4cbfda3d09c56ef96b
- SSDEEP 49152:SAMahG484PHk9f3lbgLFdlVYecy1u6lVKmpPbiRjM1W0+7kE9OErNMdcbLMMXxdT:mahRN/e8L8ZyP0mViRQ9OvZnea1
- TLSH T1CDF5337D9351C7C8E60208B87F5D3E22B67BE32039D46F972B75D11638B925A0846EBC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.