General

  • Target
    help-tgds.exe
  • Size 10.2MB
  • Sample260917-te7acsshph
  • SHA256 a42d8d2ebb9cba2b4e65a82668e8f0f6c2883b06ebb240ddf15e9df839ebb016
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      help-tgds.exe
    • Size 10.2MB
    • SHA256 a42d8d2ebb9cba2b4e65a82668e8f0f6c2883b06ebb240ddf15e9df839ebb016
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect SalatStealer payload

    • Family: salatstealer

      SalatStealer is a stealer that takes sceenshot written in Golang.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks