General
- Target svchost.exe
- Size 7.0MB
- Sample260912-ltvacatdmg
- SHA256 f9848841dfdf75078d4c13cf1f3e8f88539c55b333c27c2f9216f951c85f8e87
- MD5 c6806e99e78ae45a3bdb742d5701482e
- SHA1 729f3e7e9ad06044d1ae90da84c3ceab8e525622
- SHA512 3cc6fbbb7744251e1e5fb951749137a3ac01e3a870cd0cd81279b1e3314bffac521eccddd4f7363c124382a8e967b6e85138778d7a10bb7876c5850bff22e989
- SSDEEP 98304:fktiYkwt4pdBWY4P3CeaFOumvBh8huTAE:fbdwt4pjng3CFE
- TLSH T1FB763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
svchost.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
svchost.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target svchost.exe
- Size 7.0MB
- SHA256 f9848841dfdf75078d4c13cf1f3e8f88539c55b333c27c2f9216f951c85f8e87
- MD5 c6806e99e78ae45a3bdb742d5701482e
- SHA1 729f3e7e9ad06044d1ae90da84c3ceab8e525622
- SHA512 3cc6fbbb7744251e1e5fb951749137a3ac01e3a870cd0cd81279b1e3314bffac521eccddd4f7363c124382a8e967b6e85138778d7a10bb7876c5850bff22e989
- SSDEEP 98304:fktiYkwt4pdBWY4P3CeaFOumvBh8huTAE:fbdwt4pjng3CFE
- TLSH T1FB763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE