General
- Target Fatality.zip
- Size 3.4MB
- Sample260805-sawsdsam7v
- SHA256 b45974b59dafb1f29ac5bb904da9a56e2eb66739326504ff54528af9ebe816df
- MD5 bea1850b416f8caba77136766207d049
- SHA1 80da623766eba10c20231141eaa5ec7b3187b003
- SHA512 7c40389c1487cc465e3b6c541080e0af13f042f3e521c6cc473381386bfb50daa5240ddd655c2c8cf5298dc02cc6b6403fce456624d0c97923729193801f3005
- SSDEEP 49152:zZLiHmXMXMStS+WXbc2zCSNH4L7UPvf4EWOD1zXB4U+DHGIde7wB670P5O:zZLirDtibVC8UQvZ5D1zB4vzPB6OO
- TLSH T117F533AC4BCF8EB40CF4A45C4192A48557548F1965B9FB625EFAF3339C8D1A1C03CEA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Fatality.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fatality.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Fatality.exe
- Size 3.4MB
- SHA256 c0f0ad23f7113171088ace3522f37698de0416ad1ad536eeb7efe551e66cdfdc
- MD5 64a533fdeb1bbbb94b07150fc0b5c3f0
- SHA1 a5f0c36c68d755f175d99eb18954a9c383fadbd7
- SHA512 ec05793ef00b6eaae387f65371c20e8bc684df3bc7e15f79e7d4d7399f011192ff4131537996603d4f8ca49299d2ec151669d06628a32a1492c73e9700b9a600
- SSDEEP 49152:XgwVJGDKX9vQlZtCWEWZv1pydKO1jOZYFIBSAjdvN+bq29dtog7PRbmHy+f56tP6:ZGu+53TKaVjZNU9dthSS+56t08CJpi8
- TLSH T168F5335A41EBA0B1EBD98DF87B39051A9C870CA15B3F1CED49961BB1224A335E5FC13C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3