General
- Target Rexil.exe
- Size 3.4MB
- Sample260802-khbs7ayfka
- SHA256 a11463bf176a39f72b5ab9c0e0401dbe0eb4be8d379b2d5fd5da21da0d2286e5
- MD5 39888bfe023e44fdd4fa5b3ab616ebf8
- SHA1 5d073f25656f0f942bff1178c1a52404d63b2b17
- SHA512 f331304259475393f2e62d4c5a942c79ef4450e48aa18c402ef9ff9c5c180b75c1c86af2cc53816c2f50c8ee7f1135338676eeced80b5df9238f084b79f8c25d
- SSDEEP 98304:4sccE/PujuuenaDR/OInFsmCRAXWLtDAR:pWujuuzDFsmCWWLtg
- TLSH T1ECF533AEC360508FD9BD1CBC649A28D13428C8E8D3B35613CC2C25569E61FE96BFE5C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Rexil.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Rexil.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Rexil.exe
- Size 3.4MB
- SHA256 a11463bf176a39f72b5ab9c0e0401dbe0eb4be8d379b2d5fd5da21da0d2286e5
- MD5 39888bfe023e44fdd4fa5b3ab616ebf8
- SHA1 5d073f25656f0f942bff1178c1a52404d63b2b17
- SHA512 f331304259475393f2e62d4c5a942c79ef4450e48aa18c402ef9ff9c5c180b75c1c86af2cc53816c2f50c8ee7f1135338676eeced80b5df9238f084b79f8c25d
- SSDEEP 98304:4sccE/PujuuenaDR/OInFsmCRAXWLtDAR:pWujuuzDFsmCWWLtg
- TLSH T1ECF533AEC360508FD9BD1CBC649A28D13428C8E8D3B35613CC2C25569E61FE96BFE5C5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.