General
- Target Webrat.exe
- Size 7.0MB
- Sample261001-vthe8a1gph
- SHA256 3c2ee51c25dad5dbc645e3e9a469e870ac6fdb9841a971c08757e2f81a04144e
- MD5 98c101bf0aaec4bc595912ffb683da80
- SHA1 f84e44269f2f39c6f4807d7705486c2490e92fa1
- SHA512 6110ed61d967a125913811404af5859ac368e6fb41387453ec9c650ee7ae3064fe85ebe25cd4718ebff1bd28d43677b1fd8196be60aba19232ecae1339667bea
- SSDEEP 98304:1k7SYUKn9pJ4mJyB3CeaFOumvBh8huTXE:1JtKn9pOCA3CFp
- TLSH T1AF763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Webrat.exe
Resource
win10ltsc2021-20260911-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
Webrat.exe
Resource
win11ltsc2024-20260911-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target Webrat.exe
- Size 7.0MB
- SHA256 3c2ee51c25dad5dbc645e3e9a469e870ac6fdb9841a971c08757e2f81a04144e
- MD5 98c101bf0aaec4bc595912ffb683da80
- SHA1 f84e44269f2f39c6f4807d7705486c2490e92fa1
- SHA512 6110ed61d967a125913811404af5859ac368e6fb41387453ec9c650ee7ae3064fe85ebe25cd4718ebff1bd28d43677b1fd8196be60aba19232ecae1339667bea
- SSDEEP 98304:1k7SYUKn9pJ4mJyB3CeaFOumvBh8huTXE:1JtKn9pOCA3CFp
- TLSH T1AF763907ECA554E9C0AEC13189639562BF717C485B3123D32B50F6386F76BE0AEBA750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect SalatStealer payload
-
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.