General

  • Target
    windivert.exe
  • Size 3.4MB
  • Sample260820-yhlv2shr7s
  • SHA256 8f7338402cd66a98c73c3fd3da32d2fbcaac7ed83482f538bff433cf8d63d2a5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      windivert.exe
    • Size 3.4MB
    • SHA256 8f7338402cd66a98c73c3fd3da32d2fbcaac7ed83482f538bff433cf8d63d2a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect SalatStealer payload

    • Family: salatstealer

      SalatStealer is a stealer that takes sceenshot written in Golang.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks