salatstealer | da96c49b317e04308785989ccb05d2a6fccfb16b3c5ecbc9c901fa961a08b760

Resubmissions

05/09/2026, 11:27

260905-nkq8fade4610

05/09/2026, 11:23

260905-ng8nbabl5s10

Sharing

Copy URL Twitter E-mail

General

Target
AnomicDuper.zip
Size 35.1MB
Sample260905-ng8nbabl5s
SHA256 da96c49b317e04308785989ccb05d2a6fccfb16b3c5ecbc9c901fa961a08b760
MD5 37e7b7c61306cf7fa4d88092616a63d6
SHA1 0a56c03f4d872c2b0c729d3c9c275390aacccb3c
SHA512 09cc01dc00c3db83be0ba1add6a90793776355a2f2a84a5be14d80f16bbff6d996107a89e72e95bcfd43603b79ce2e1bca65b437e65ac84433440b9900083e37
SSDEEP 786432:4mutMrPmZuSQZkNckP4AtUZ2lpkBUC6j+yYlOJrr3V:mtMrPmZIkCBZZUpkBUxanlwbV
TLSH
T16A87330CDB7E0A17A8FA0662D06A8CFFFF5F170609E331FE94D19C798B581634A85592
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Launcher.exe
- Size 3.4MB
- SHA256 7e7ef5b1cc82799cff8ac357bc6f7b3e5c1bfc4275b0c93da61db7e458d611e8
- MD5 4e9def021931e28ae897bcb608b537db
- SHA1 ae588dce549e626c8e4f48a59a774d6340f6d9e0
- SHA512 c860c4b9a4f1033d55b6c3da9fe64f870aeb47a87dce7fe63e24163ca3d0cf40fb14782f5d5c6390d0845baf30b782fc1663f186fb4987b2ecfdd54f866e6223
- SSDEEP 98304:uWa3rTPf3V/GaurmP1jDvQ8FIrygnddybYX9p4:u3rTHQaqm9w+YDrta
- TLSH
  T1C3F5339611B70779EA2052B07F86B6C9588B0E738593183097EFA7395E3ECD453AF708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery salatstealer stealer upx
- Detect SalatStealer payload
- Family: salatstealer
  SalatStealer is a stealer that takes sceenshot written in Golang.
  stealer salatstealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  api.dll
- Size 763KB
- SHA256 617084bc6db3d61db7e429086d719813621ced822e17bbd204da1a3fd96d8ff6
- MD5 fc3cee42721c900acebe65ded17a7886
- SHA1 11f7f8ddbae67fefd5560abb327f8bc32ab6cd31
- SHA512 2975fd0c07ca2eb22ad22704157652db32c96a40b336aa65febc982d5828a2c5d071189eb97750a35ee9affcc2b440ef41365587c9aeecd0e59d8caf0fdaa270
- SSDEEP 12288:7ORftGXrLEUB7v14t677Vut+XG1ykwM+hGxCxyzf:7QtGXrL9Bx4tSVuUXG4fM+hGA6f
- TLSH
  T1F6F416027A9DBCE5D4749530177787F25B2CEC212A80E54FB2D17F1AA83D293B918B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  bypasser.lps
- Size 361KB
- SHA256 f5cb9796e4517d2e2d3468a5de1da12bc57d0a582cab46f8a70b69b0ffde928d
- MD5 0ee48cc819e58d266827f8605af17abd
- SHA1 e9f9fff398040cb8e7427f29a49a7931645a67aa
- SHA512 93871d27ffb4e5f1e03beb692464eb33344af1571e18c45d311713aa1305f13794ed988878e9161fdd8e4ea36abf845e7852d881319f1c4d658287a1850e22a5
- SSDEEP 6144:uDopskUd9uNPbl2KBikuaQRZ66z+n4VZbd8g79pgrXNgRnVLjyzhbkidNN2:uDopsk89jKjuaQRZ66z24VZbdrpgrXN5
- TLSH
  T1AA74948AAA6A60F8E415F13E8756C53DAEF27C2017F41DDF12C8F13F8A32D852539961
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  resources/lua_API.dll
- Size 197KB
- SHA256 2f3daf08b248b0a8aa0c47ba81864be7d379a0229599cdec3b93281b57fcd280
- MD5 f65b883128779592cca7d01cc87937bf
- SHA1 00f9a72c7cbeff5d10f8bd100a6e4d941a6bfdaf
- SHA512 a3cf1975051910203179a3b4bda0bec7638b9dc08266a2d66850f33ebc1c1503f69cc34aa3c06c82b41ae9b95f6c911a54a7373e07d1d8bc3004b5ccb3e75eab
- SSDEEP 6144:sakZ73v9Wc0ZEW4oj0ZgWiWEd3ReoZqfDzITR:CZYc0ZEW4ougWijdBeoZmsN
- TLSH
  T1D5143A2D22EE10D5E47B917CCD424246E6B27431232262EF16E0C57D8F23AEDBA79F51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  resources/reader.dll
- Size 31.0MB
- SHA256 4bc860ee664834420f14be1466931e0f3516618554f41158cdc0d49925c139ed
- MD5 5ab4ab659ff21e1cb4fe268c96e0c7ca
- SHA1 dbbd4209dedeac972567d6a9a05e2b4b0373b639
- SHA512 5fe66e0bcd92aabd0cbdf4bd4cd71eef508ece14b6e048f10ce2906b54a9a1afd1544efa5e10993cb76edf7cd937a875e7646b2a3e3e1550c89f19c4b94e8c45
- SSDEEP 786432:q4w27roo24WihgIDyjJIAjyKAX+QpxwzjqEdr:Q231WihgHrjyJpxwzGi
- TLSH
  T1216733E0DE248294E7B34CBDC8F36E660DD2556EE197ED944A318C21AFD53F428E11CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Detect SalatStealer payload

Family: salatstealer

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8