General
- Target Telegram - Snoser.rar
- Size 3.4MB
- Sample260825-kc7zfavybw
- SHA256 866397209bc6c81dc0bf8bd074e4e1158d6269ffbdfb63caf09f0bd8a2e13635
- MD5 b1a8b056c138808df81b16299b7934bb
- SHA1 68f2495d0de7dadbff23691a0ac784e328a37426
- SHA512 1dfa432714cc2cd915e969961d3760d1ddf6777c5203bfba7206dfaf7bb0dde2a3187b1ebf19e5aa6207617ec97dd00b934d68f0d4a1bc9bfdbea687ebddb66e
- SSDEEP 49152:MNGjv8Dq/Am5Oh5kLSgp92/H4WSd+pLAx8h6OMy65fAnSuRXgnlz+A/ic+ygvz:MIj0WoufV92qd4kx8h6vZAnSuRXUfY
- TLSH T173F533A51060F55B12C19F978B2FD4929F78FF3B666824ECDE487C3272899947F01B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Telegram - Snoser/snoser.exe
Resource
win11-20260513-en
5 signatures
30 seconds
Malware Config
Targets
-
- Target Telegram - Snoser/snoser.exe
- Size 3.4MB
- SHA256 37cbf054c356ddb6ca2e79d36c276ea43d24e919110ec283d094a20cc74296ec
- MD5 3ef893c2ee152ba1eebd22a80a6c0d2f
- SHA1 44f8a0ba005f1979a5bc0fc70740aad6c2fac261
- SHA512 cb93625061acae59ac9a241bafce3a90a30302cf47e36b7ac93456c55bb66ee3b6a6ca943badc98a61b87bd5e837913d3e8a2423b87f1fe533670f0dc9d205c7
- SSDEEP 49152:AFGxLuSGUJUg4u89TgxwRf/wl1I6DKMG8ZyNisDvnN/PCNVgvlS92biN9MX8:AAxSPsriDRfKIStG8Zy0cN/PCNV09
- TLSH T1B5F533A91060F557D2C18FB78B2FD4929F68FF3B666824EC9E887D3232899947F01711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.