General
- Target Tom Clancy's Rainbow Six Siege 2026.07.13 - 12.47.31.02.mp4
- Size 7.7MB
- Sample260731-ta96fsch72
- SHA256 8f499db34a9e658ebe4b23790a9ed6c6aeb9d0dd38493792b060731544755a60
- MD5 1437e2916d6a61ced0fb404de6a18b1b
- SHA1 1dc5a691dd2e7cd032261053169915208303b5d8
- SHA512 6c8bf1e8b5710c7e998e76c4023249de3bc362307e07aa8b8684ae7b335917900d5712ae21c2aad4d8fad9be831e1d5a8533ea4d629fd2185bb0fb7b327605ac
- SSDEEP 196608:6ZxJlGUZu1veon8WFbheBrbP9ZPK1F6uCgd:WA1vxnFeBPPOZCgd
- TLSH T1338633B5FBB89A74CFE08AB2C254D03234CADF088431589FB4E92C16752AE9D7D914D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Tom Clancy's Rainbow Six Siege 2026.07.13 - 12.47.31.02.mp4
Resource
win11ltsc2024-20260709-en
25 signatures
900 seconds
Malware Config
Targets
-
- Target Tom Clancy's Rainbow Six Siege 2026.07.13 - 12.47.31.02.mp4
- Size 7.7MB
- SHA256 8f499db34a9e658ebe4b23790a9ed6c6aeb9d0dd38493792b060731544755a60
- MD5 1437e2916d6a61ced0fb404de6a18b1b
- SHA1 1dc5a691dd2e7cd032261053169915208303b5d8
- SHA512 6c8bf1e8b5710c7e998e76c4023249de3bc362307e07aa8b8684ae7b335917900d5712ae21c2aad4d8fad9be831e1d5a8533ea4d629fd2185bb0fb7b327605ac
- SSDEEP 196608:6ZxJlGUZu1veon8WFbheBrbP9ZPK1F6uCgd:WA1vxnFeBPPOZCgd
- TLSH T1338633B5FBB89A74CFE08AB2C254D03234CADF088431589FB4E92C16752AE9D7D914D7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory