General
- Target file.exe
- Size 9.6MB
- Sample260902-wtbhcazcqa
- SHA256 e457fab4be7dd77e4b401e726b86008afab05bb3420d42bc2fae30fc74f6420d
- MD5 2618a5b36c6dcb8fb08622e62a8ddec1
- SHA1 1d174fe73ec2e2e222d9cf44eac12cd296a347ce
- SHA512 0fbacbe08107af36a24270177dc824a115e11e234cc54cc38e35bca35f87c83904b440f171343604383e5fa1fb6084b66497108d0c6c22347144388dcbd3af30
- SSDEEP 98304:vvX+xcwNdFfNVYkhpXwNCFd9kg2ZuZHO8WhUZ1SguavB0R4oZ5Yw7aLSxFDZcR5d:vmz9NVphpgEFdOBSjVVUvfjOMmb
- TLSH T1D9A6AE43EC9545E9C0AEE13186679252BB717C485B3127E32B90F3382F76BD0AEB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 9.6MB
- SHA256 e457fab4be7dd77e4b401e726b86008afab05bb3420d42bc2fae30fc74f6420d
- MD5 2618a5b36c6dcb8fb08622e62a8ddec1
- SHA1 1d174fe73ec2e2e222d9cf44eac12cd296a347ce
- SHA512 0fbacbe08107af36a24270177dc824a115e11e234cc54cc38e35bca35f87c83904b440f171343604383e5fa1fb6084b66497108d0c6c22347144388dcbd3af30
- SSDEEP 98304:vvX+xcwNdFfNVYkhpXwNCFd9kg2ZuZHO8WhUZ1SguavB0R4oZ5Yw7aLSxFDZcR5d:vmz9NVphpgEFdOBSjVVUvfjOMmb
- TLSH T1D9A6AE43EC9545E9C0AEE13186679252BB717C485B3127E32B90F3382F76BD0AEB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting