General
- Target adas.exe
- Size 3.4MB
- Sample260808-v4gaxaef62
- SHA256 c964a9c1f74420abb9006a3b2e3738729517eab0c112f8e7f34864878b18fcbe
- MD5 ced969a4261a47fa903d54a921e37a7f
- SHA1 65ca0ab43c2d9ad3daec109f7c4ebaadad7f52d5
- SHA512 08bc1669c10dd810fc8c59733ceac4382ddb0cef538fd3834bc7c123fcf4f0a85c2c73f102ac35c96c41f7c63139dc14fa3b7163a31fb56d928ac75cce36fc8e
- SSDEEP 98304:zguU0yCOUGuU9Pz4ViqMRkU+bz2z2z0fGKkctocivG:zguUoOVPzF9Fy2tsctoZvG
- TLSH T147F5334F4565D608E3231239768BBA793FD8B05E8DC3348B45B721D9E6743972B809EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
adas.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
adas.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target adas.exe
- Size 3.4MB
- SHA256 c964a9c1f74420abb9006a3b2e3738729517eab0c112f8e7f34864878b18fcbe
- MD5 ced969a4261a47fa903d54a921e37a7f
- SHA1 65ca0ab43c2d9ad3daec109f7c4ebaadad7f52d5
- SHA512 08bc1669c10dd810fc8c59733ceac4382ddb0cef538fd3834bc7c123fcf4f0a85c2c73f102ac35c96c41f7c63139dc14fa3b7163a31fb56d928ac75cce36fc8e
- SSDEEP 98304:zguU0yCOUGuU9Pz4ViqMRkU+bz2z2z0fGKkctocivG:zguUoOVPzF9Fy2tsctoZvG
- TLSH T147F5334F4565D608E3231239768BBA793FD8B05E8DC3348B45B721D9E6743972B809EC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting