General
- Target Zyra.exe
- Size 3.4MB
- Sample260810-2qxjasbk7v
- SHA256 7e7ef5b1cc82799cff8ac357bc6f7b3e5c1bfc4275b0c93da61db7e458d611e8
- MD5 4e9def021931e28ae897bcb608b537db
- SHA1 ae588dce549e626c8e4f48a59a774d6340f6d9e0
- SHA512 c860c4b9a4f1033d55b6c3da9fe64f870aeb47a87dce7fe63e24163ca3d0cf40fb14782f5d5c6390d0845baf30b782fc1663f186fb4987b2ecfdd54f866e6223
- SSDEEP 98304:uWa3rTPf3V/GaurmP1jDvQ8FIrygnddybYX9p4:u3rTHQaqm9w+YDrta
- TLSH T1C3F5339611B70779EA2052B07F86B6C9588B0E738593183097EFA7395E3ECD453AF708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Zyra.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Zyra.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Zyra.exe
- Size 3.4MB
- SHA256 7e7ef5b1cc82799cff8ac357bc6f7b3e5c1bfc4275b0c93da61db7e458d611e8
- MD5 4e9def021931e28ae897bcb608b537db
- SHA1 ae588dce549e626c8e4f48a59a774d6340f6d9e0
- SHA512 c860c4b9a4f1033d55b6c3da9fe64f870aeb47a87dce7fe63e24163ca3d0cf40fb14782f5d5c6390d0845baf30b782fc1663f186fb4987b2ecfdd54f866e6223
- SSDEEP 98304:uWa3rTPf3V/GaurmP1jDvQ8FIrygnddybYX9p4:u3rTHQaqm9w+YDrta
- TLSH T1C3F5339611B70779EA2052B07F86B6C9588B0E738593183097EFA7395E3ECD453AF708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.