Analysis
- user interaction
yes - max time kernel
16s - max time network
19s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/08/2026, 10:17
Behavioral task
behavioral1
Sample
spoofer-private.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
spoofer-private.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target spoofer-private.exe
- Size 3.4MB
- Sample260815-mbebvatflc
- SHA256 7751bdd6abf8affbded0a4a5b8715dc31c2ef1bcdc049b9d9cc03b9ae9fb5272
- MD5 c742930d019591e10bdc739a473ef897
- SHA1 25682e5dce7cb25cee0e24295c81521d8eb97d73
- SHA512 5d34527837aa01c345e29a8070c5f726b2e4416a63c4d1b6fa43d3512ba29e6e2f6fdd5c9871297eb4765f36338f750e1270d8d34649f36fd68fbfd70f974086
- SSDEEP 49152:sfKuDsGc2gxYIWNKXfnBHmEoNV8yHH+PBgUNdphT5iGVeaPGCcPH3/3WeBKK3z2u:uVLyYEXftoP80SR9A/3Wsz2PuVDbN
- TLSH T1AEF533B2271C4E98DB094FBB927AF704B974C6196AEB5D26805EC700C4AD8D4A37C91F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
- Detect SalatStealer payload 1 IoCs
resource yara_rule behavioral2/memory/5700-2-0x00000000002E0000-0x0000000000F37000-memory.dmp family_salatstealer -
resource yara_rule behavioral2/memory/5700-0-0x00000000002E0000-0x0000000000F37000-memory.dmp upx behavioral2/memory/5700-2-0x00000000002E0000-0x0000000000F37000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language spoofer-private.exe