General
- Target 7c04a11b72485957f38a65a92666de7d0a6f80fee78e45638a5db5505ae318e1.exe
- Size 12.0MB
- Sample260924-dpsxqacf97
- SHA256 9b0050d44e7ea5b1d612ce396c70e7c789342f00b07980e5f8dfed4506516b2f
- MD5 05241d1d9a3e81e219a041209daba606
- SHA1 b583f847141957277a34e033132abcac01cd0922
- SHA512 76bb0e487ec36cbe2dbc3c20fc37109deddc2412ddc846addea53b7e2e7c2b9b19ec03de731d97cd9f28836eeb2d794f9ef58defc8a20db2fff7291dece05657
- SSDEEP 98304:ezxwfsG35rWoi7GrtP9LVVPMgoArD34NG20CwE7:wGIJG5P9LQgo+Lno7
- TLSH T1A5C66B11FACB58F1E903583140ABB27F63315D048B38DB9BEB143B6AF87B6A11976705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
7c04a11b72485957f38a65a92666de7d0a6f80fee78e45638a5db5505ae318e1.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
7c04a11b72485957f38a65a92666de7d0a6f80fee78e45638a5db5505ae318e1.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 7c04a11b72485957f38a65a92666de7d0a6f80fee78e45638a5db5505ae318e1.exe
- Size 12.0MB
- SHA256 9b0050d44e7ea5b1d612ce396c70e7c789342f00b07980e5f8dfed4506516b2f
- MD5 05241d1d9a3e81e219a041209daba606
- SHA1 b583f847141957277a34e033132abcac01cd0922
- SHA512 76bb0e487ec36cbe2dbc3c20fc37109deddc2412ddc846addea53b7e2e7c2b9b19ec03de731d97cd9f28836eeb2d794f9ef58defc8a20db2fff7291dece05657
- SSDEEP 98304:ezxwfsG35rWoi7GrtP9LVVPMgoArD34NG20CwE7:wGIJG5P9LQgo+Lno7
- TLSH T1A5C66B11FACB58F1E903583140ABB27F63315D048B38DB9BEB143B6AF87B6A11976705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting