General

  • Target
    Tom Clancy's Rainbow Six Siege 2026.07.13 - 12.47.31.02.mp4
  • Size 7.7MB
  • Sample260731-ta96fsch72
  • SHA256 8f499db34a9e658ebe4b23790a9ed6c6aeb9d0dd38493792b060731544755a60
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Tom Clancy's Rainbow Six Siege 2026.07.13 - 12.47.31.02.mp4
    • Size 7.7MB
    • SHA256 8f499db34a9e658ebe4b23790a9ed6c6aeb9d0dd38493792b060731544755a60
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect SalatStealer payload

    • Family: salatstealer

      SalatStealer is a stealer that takes sceenshot written in Golang.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks