General
- Target PulseLauncher.zip
- Size 3.4MB
- Sample260831-tshh6aythy
- SHA256 8d8262c35109d6b92469ad040b1368994aac609a1bd95b3e528da80a289dcf12
- MD5 e1cecb936903cf1ee0dd9156a2786fd6
- SHA1 aa452482275ec4df9f1677539d44b093c0f72a9d
- SHA512 58c6daa0b0eec9fcbeb9c385ab9b1ceceac1dbe90fd48e0b9e0b55a27b643f7ca07aa19daa43818d8d09398413e6d1073c0d343fee3b4d888bad29808ebfed5b
- SSDEEP 49152:HUbnyPli5U9QX/s+ae+IYTuiTMergpbgycpU7QNzyPbcT70sPs0No6hpW/NOhF2:HUbnaifEe+xwNUy2G4/0sU0S6IG4
- TLSH T1E7F5339F7527479A87D7C414D2FBC0A0F35F6C83AA80A23F91EA7742E49F6001792E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
PulseLauncher.zip
Resource
win11-20260513-en
17 signatures
600 seconds
Malware Config
Targets
-
- Target PulseLauncher.zip
- Size 3.4MB
- SHA256 8d8262c35109d6b92469ad040b1368994aac609a1bd95b3e528da80a289dcf12
- MD5 e1cecb936903cf1ee0dd9156a2786fd6
- SHA1 aa452482275ec4df9f1677539d44b093c0f72a9d
- SHA512 58c6daa0b0eec9fcbeb9c385ab9b1ceceac1dbe90fd48e0b9e0b55a27b643f7ca07aa19daa43818d8d09398413e6d1073c0d343fee3b4d888bad29808ebfed5b
- SSDEEP 49152:HUbnyPli5U9QX/s+ae+IYTuiTMergpbgycpU7QNzyPbcT70sPs0No6hpW/NOhF2:HUbnaifEe+xwNUy2G4/0sU0S6IG4
- TLSH T1E7F5339F7527479A87D7C414D2FBC0A0F35F6C83AA80A23F91EA7742E49F6001792E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Detect SalatStealer payload
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
Executes dropped EXE
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
Accesses cryptocurrency files/wallets, possible credential harvesting
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3