Overview

overview

10

Static

static

1

service.bat

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    service.bat
  • Size 16.2MB
  • Sample260925-ve8nvsfh33
  • SHA256 e608c1a7340e104889fe3b97a8a271a558ac2cedb73e509826fcfa06e5b5d37f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
salatstealerdefense_evasiondiscoveryexecutionstealerupx

Malware Config

Targets

    • Target
      service.bat
    • Size 16.2MB
    • SHA256 e608c1a7340e104889fe3b97a8a271a558ac2cedb73e509826fcfa06e5b5d37f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoveryexecutionsalatstealerstealerupx

    • Detect SalatStealer payload

    • Family: salatstealer

      SalatStealer is a stealer that takes sceenshot written in Golang.

      stealersalatstealer

    • Looks for VirtualBox drivers on disk

      defense_evasion

    • Looks for VirtualBox executables on disk

    • Executes dropped EXE

    • Deobfuscate/Decode Files or Information

      Payload decoded via CertUtil.

      defense_evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks