General
- Target DChecker.exe
- Size 7.1MB
- Sample260822-j2w3sssepf
- SHA256 dc32871549c5e9f7307e3188b428426147ed877ec32d278d3bb5685f6883de05
- MD5 b9da18049091964b94b3dae67849431d
- SHA1 03c880c3cba72fadc1f62990e0c6d359eac6102c
- SHA512 efab84b3762e8c7f41e00a08e2295d55fbfa36496bc5f6c268b97101f0252ef115f02eacc5796bd95571b114f8ab610a0aaf64c5cc98ed9a5c3379daca79e2d7
- SSDEEP 49152:qCjK3i3tWkJQZ62EbIuT9lxmODMCzmhuArgJPeqLY8YQ5gyuK0nWirV1pm7um6K7:qCekTOhn4UgOmHeumvBh8huTtEV
- TLSH T198764917ECA558E9C0ADC13085729563BF717C481B2063D72B60F6287F76BE46EBA384
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
DChecker.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
DChecker.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target DChecker.exe
- Size 7.1MB
- SHA256 dc32871549c5e9f7307e3188b428426147ed877ec32d278d3bb5685f6883de05
- MD5 b9da18049091964b94b3dae67849431d
- SHA1 03c880c3cba72fadc1f62990e0c6d359eac6102c
- SHA512 efab84b3762e8c7f41e00a08e2295d55fbfa36496bc5f6c268b97101f0252ef115f02eacc5796bd95571b114f8ab610a0aaf64c5cc98ed9a5c3379daca79e2d7
- SSDEEP 49152:qCjK3i3tWkJQZ62EbIuT9lxmODMCzmhuArgJPeqLY8YQ5gyuK0nWirV1pm7um6K7:qCekTOhn4UgOmHeumvBh8huTtEV
- TLSH T198764917ECA558E9C0ADC13085729563BF717C481B2063D72B60F6287F76BE46EBA384
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1