General
- Target CheckerZlauncher.exe
- Size 3.4MB
- Sample260809-q6p9dafr4y
- SHA256 37934b0cfd69b38d000a19ad878ac6505d622be453875fe276156273a75f3ed2
- MD5 e4109de3f290ce40a65cfa18b3417ffc
- SHA1 e983112b6c65f89af33099a76fef03b3b9bfc9d3
- SHA512 6ed90ffc88f35f2cd79aacf897dd19b947b7d8c8b7d4b4efaf7fe313f3b447e71e62dbf7ea9649112389b39396f7fa4774d1ded5e8373de1fd8d8142b86d1d38
- SSDEEP 49152:J1XeRl2S2aBAJLk14D0nLQbcX5I5aA0jOtHYQ4vdX+XTyZip6qQhZ+magRme:JV42sAJY1rLQYXoa4t4vduXOrqQhH/c
- TLSH T193F533F24BB75224C41921F9A5F648AB17EC8276640EC3E80DA76637C2F85E4D7F40B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
CheckerZlauncher.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
CheckerZlauncher.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target CheckerZlauncher.exe
- Size 3.4MB
- SHA256 37934b0cfd69b38d000a19ad878ac6505d622be453875fe276156273a75f3ed2
- MD5 e4109de3f290ce40a65cfa18b3417ffc
- SHA1 e983112b6c65f89af33099a76fef03b3b9bfc9d3
- SHA512 6ed90ffc88f35f2cd79aacf897dd19b947b7d8c8b7d4b4efaf7fe313f3b447e71e62dbf7ea9649112389b39396f7fa4774d1ded5e8373de1fd8d8142b86d1d38
- SSDEEP 49152:J1XeRl2S2aBAJLk14D0nLQbcX5I5aA0jOtHYQ4vdX+XTyZip6qQhZ+magRme:JV42sAJY1rLQYXoa4t4vduXOrqQhH/c
- TLSH T193F533F24BB75224C41921F9A5F648AB17EC8276640EC3E80DA76637C2F85E4D7F40B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.