Extracted

• • Target
    install.ps1
  • Size 1KB
  • SHA256 0ccc2b2582bf7401924554e504fc0acf15984fd34cee25185e61b0295930a736
  • MD5 97672c58e84db46e120204a2eb8fa345
  • SHA1 166f483f425c6179c15962461b043cc9468adec1
  • SHA512 3a5c1429071ac12c8e1322a990baca4d903d2c80d54bd6fec42469b6fa50640e6fd5247669009d839180f4e60b97c971ac4e0b2442c129452d594ff4b1779976
  • TLSH
    T1F2312972193C91E18D52818726DB3AD704F1C72809C16CC9F08E4A809F7CDED49BE0F9
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  executiondiscoverysalatstealerstealerupx

  • Detect SalatStealer payload

  • Family: salatstealer

    SalatStealer is a stealer that takes sceenshot written in Golang.

    stealersalatstealer

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Executes dropped EXE

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2