General

  • Target
    https://workupload.com/start/f3mgdXChfha
  • Sample261014-xhqcsszzhw

Malware Config

Targets

    • Target
      https://workupload.com/start/f3mgdXChfha
    • Detect SalatStealer payload

    • Family: salatstealer

      SalatStealer is a stealer that takes sceenshot written in Golang.

    • Executes dropped EXE

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks