General
- Target DiscordFix.exe
- Size 32.4MB
- Sample260916-tm2d3sdk8v
- SHA256 f847f7cf7f46e24a1e568139d9879263cc149bb646cb072ab4dc560ed8c748a1
- MD5 01b3ce08a02ec68780df931c0949ec52
- SHA1 f0ab1cc1910d883239a3bfec98adc9043f51260b
- SHA512 9275f4b67e5871071ac37e7d6455e709e45f251902134331472299be4733b3461f1a594a4163426360e4dbea9dcd5092381d21c534ecd2fdd6c2a21956570cce
- SSDEEP 24576:oDqXPDnmCBLLuEM0zj+SoUFQzu0CXILCk6K5EE4XxNcjImInS/MBmDNnLOMKxRVN:JLmCBHuEMm+SoUx0kc4oh8
- TLSH T16777CF8875CC18D0A6EF27EE61816D3CF34A16D2DF4A09C60199F78ABED7DB1DD28448
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DiscordFix.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
DiscordFix.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target DiscordFix.exe
- Size 32.4MB
- SHA256 f847f7cf7f46e24a1e568139d9879263cc149bb646cb072ab4dc560ed8c748a1
- MD5 01b3ce08a02ec68780df931c0949ec52
- SHA1 f0ab1cc1910d883239a3bfec98adc9043f51260b
- SHA512 9275f4b67e5871071ac37e7d6455e709e45f251902134331472299be4733b3461f1a594a4163426360e4dbea9dcd5092381d21c534ecd2fdd6c2a21956570cce
- SSDEEP 24576:oDqXPDnmCBLLuEM0zj+SoUFQzu0CXILCk6K5EE4XxNcjImInS/MBmDNnLOMKxRVN:JLmCBHuEMm+SoUx0kc4oh8
- TLSH T16777CF8875CC18D0A6EF27EE61816D3CF34A16D2DF4A09C60199F78ABED7DB1DD28448
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Looks for VirtualBox executables on disk
-
Executes dropped EXE