Overview

overview

10

Static

static

10

webrat.exe

windows10-2004-x64

10

webrat.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    webrat.zip
  • Size 3.0MB
  • Sample261030-b91rysda47
  • SHA256 1ff00baf4a0329fd9a38aff8c74a5597868e9f5aa2ba22ed32682e308422e917
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
salatstealerdefense_evasionexecutionpersistencestealer

Malware Config

Targets

    • Target
      webrat.exe
    • Size 7.2MB
    • SHA256 2c496e41d45ee787edef9c8dec4fe59e68a0d99746c899a6aabc6cbb36419bd6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasionexecutionsalatstealerpersistencestealer

    • Detect SalatStealer payload

    • Family: salatstealer

      SalatStealer is a stealer that takes sceenshot written in Golang.

      stealersalatstealer

    • Executes dropped EXE

    • Uses WMI to collect hardware manufacturer information

      Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks