General
- Target Setup.exe
- Size 6.2MB
- Sample260822-sep6eahm2y
- SHA256 336d24ec7364fb422019430db0a84acaf24982f03837422dfc44631d31da3763
- MD5 00d781d081978e8d48c41a9f4fe818c1
- SHA1 15619fe779ba1461de24534fdf2fb9d0ec0cca97
- SHA512 18109ae31ce554656921c06b3dcfbb61f10bf5f2abb94ff0bf4f1b27ab667b08391b44afad49ee85bc2ab1b93120ead01ecdcf962d9578cc270d9bf74499cff7
- SSDEEP 98304:VOmjPQin9STckFNwr1v5yjGUNdHNpsls:kUI8YckjUvyDpsls
- TLSH T16D56D007FCA158E6C0AEE271893295527B71BC481F3163DB2A90B7B82FB27D09D79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 6.2MB
- SHA256 336d24ec7364fb422019430db0a84acaf24982f03837422dfc44631d31da3763
- MD5 00d781d081978e8d48c41a9f4fe818c1
- SHA1 15619fe779ba1461de24534fdf2fb9d0ec0cca97
- SHA512 18109ae31ce554656921c06b3dcfbb61f10bf5f2abb94ff0bf4f1b27ab667b08391b44afad49ee85bc2ab1b93120ead01ecdcf962d9578cc270d9bf74499cff7
- SSDEEP 98304:VOmjPQin9STckFNwr1v5yjGUNdHNpsls:kUI8YckjUvyDpsls
- TLSH T16D56D007FCA158E6C0AEE271893295527B71BC481F3163DB2A90B7B82FB27D09D79744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting