salatstealer | 337544e5662ad22140a393d08f22b12964908585838aa359efa4cab889561540

General

Target
Hemera.zip
Size 3.4MB
Sample261018-r2sdlsbd73
SHA256 337544e5662ad22140a393d08f22b12964908585838aa359efa4cab889561540
MD5 aff50f9a1f5a65cd160acfb05342a7b0
SHA1 6b9af5c4542881b09a4843a32bb68ddf8764fb77
SHA512 2d5b7e5b57522f052bf5bfee83b2db5a3d8e7046e9370dd5faad7ba54e02e5d7f96d1d266e86df1426c53320b58dd2e7c79264a81cc35bc48f029b144d15ec1f
SSDEEP 98304:6EDhL0KG4WnlmryUJUxc/JxCNUEygpHtQnFLBXM:NDt0KG4Wnlm6xC/3CR+nBBXM
TLSH
T1E2F533D2B86F2425D6CD9D65DE09BCB6C95C7C84B1ACBBA120F699905FC890CF00B7E4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Hemera.zip
- Size 3.4MB
- SHA256 337544e5662ad22140a393d08f22b12964908585838aa359efa4cab889561540
- MD5 aff50f9a1f5a65cd160acfb05342a7b0
- SHA1 6b9af5c4542881b09a4843a32bb68ddf8764fb77
- SHA512 2d5b7e5b57522f052bf5bfee83b2db5a3d8e7046e9370dd5faad7ba54e02e5d7f96d1d266e86df1426c53320b58dd2e7c79264a81cc35bc48f029b144d15ec1f
- SSDEEP 98304:6EDhL0KG4WnlmryUJUxc/JxCNUEygpHtQnFLBXM:NDt0KG4Wnlm6xC/3CR+nBBXM
- TLSH
  T1E2F533D2B86F2425D6CD9D65DE09BCB6C95C7C84B1ACBBA120F699905FC890CF00B7E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Hemera.exe
- Size 3.4MB
- SHA256 b6e78481727d39d8743957a370e33049307da73d76c77ebd7704300161c9e2a6
- MD5 6011ca5e4e9274f31fcbc2d856cd3ec9
- SHA1 20b7150136a72efc443e8ecfaad8abc5e36e2eb0
- SHA512 6ee0bceb25b6ec54d8832eb4fc1945b5d8c0cd583c12d405d423cbf50690d15cd49c98b33c8cd18ae8f60ce90df5346c289c89a51cbb971efc631e0286737b32
- SSDEEP 98304:oeKIn7GruZ59d7x+AS5F1P09cudcgeiHXq3ogFbX:oe79DkJMvdcaaYgt
- TLSH
  T16EF533490FD08836E76BE03E550F0246355546CE316AC7D280F960CBB6EBEB73B1A939
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery salatstealer stealer upx
- Detect SalatStealer payload
- Family: salatstealer
  SalatStealer is a stealer that takes sceenshot written in Golang.
  stealer salatstealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral2
- Target
  PASSWORD: 9243
- Size 14B
- SHA256 e1733ad211db594b03c8be63134744dedf5592886616d07f43979d0760eaeb7e
- MD5 8c5a7129e542dcb7b072ff0c730d4b86
- SHA1 09333203ccb79a53f4ae0c97f6a3712e58cfca1c
- SHA512 8029a425f12f5abd58cca772080a2394257529aea414214cdc5a2b637b77e6727552039bef8293a1a82da6da975d4ee4912898d4d773cb31a4979bcaf1ef3ccd
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral3
- Target
  instruction.txt
- Size 651B
- SHA256 2eacac7299db6d35820999636fe720da2bf16bf2e2c834b99328aa66ace3223f
- MD5 98d4b6c3c174ec438d7f7f53b0dd92f6
- SHA1 99355b79e3fd17d7922f222b1a13b35cc660fcca
- SHA512 1340e229585cc6c0da4d453f253b86c4268bec3462b20a818fec0f0ef227a00612eb1d80ed649c7d539f898b6814183099972b7ebd0193d9feb6e48d76253043
- TLSH
  T15BF04912926A367E0221348FCD083649E69319FD2F169A9324682C3E75F6D32D5295AB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral4