General
- Target cd1ce568547d8816.bin.exe
- Size 12.0MB
- Sample261102-aq84jsd18y
- SHA256 4afc0af2fe1a66a740b72a9ab743df63e2b5c2746717c1e7b29828929bf83064
- MD5 b1d3049eb3946d624fa4cde56cd08f81
- SHA1 2a191bef8a8c91b189af6554231316866069debf
- SHA512 f86dcacce50c69f848ce9fc45ba01bdc79c5a68f699f556490c3b4d40e0adddd6b96ffed8d4e88eb7be09f061e821014b90044baa23d9000e920d50f0072fa27
- SSDEEP 98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+i:yBkKr5rszpNDy+i
- TLSH T199C65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
cd1ce568547d8816.bin.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
cd1ce568547d8816.bin.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target cd1ce568547d8816.bin.exe
- Size 12.0MB
- SHA256 4afc0af2fe1a66a740b72a9ab743df63e2b5c2746717c1e7b29828929bf83064
- MD5 b1d3049eb3946d624fa4cde56cd08f81
- SHA1 2a191bef8a8c91b189af6554231316866069debf
- SHA512 f86dcacce50c69f848ce9fc45ba01bdc79c5a68f699f556490c3b4d40e0adddd6b96ffed8d4e88eb7be09f061e821014b90044baa23d9000e920d50f0072fa27
- SSDEEP 98304:tjhOBNrzuaCerzFi6bszT1JX4pG2IfZE+i:yBkKr5rszpNDy+i
- TLSH T199C65B11FACB54F6F9036831406BB27F23355D058B28CB9BEB183B6AF877691187A705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detect SalatStealer payload
Family: salatstealer
SalatStealer is a stealer that takes sceenshot written in Golang.
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
Executes dropped EXE