Salat Stealer malware
Salat Stealer is a malware family identified by Malva.RE's static analysis engine through dedicated YARA rules and collectors.
Malva.RE has analysed 167 public samples tagged Salat Stealer, statically and without execution. The latest public sample was seen on 2026-10-30.
File types
- PE Executable40
Recurring C2 endpoints
hxxps://salator[.]es/sa1at/40hxxps://wruser[.]org/sa1at/40hxxps://websalat[.]top/sa1at/40hxxps://sa1atik[.]cn/sa1at/40hxxps://wruser[.]org:992/sa1at/40
Defanged. Extracted statically from the configurations of public samples.
Latest public Salat Stealer samples
Analyse your own Salat Stealer sample
Malva.RE unpacks, decompiles and extracts the configuration of suspicious files statically — the file is never executed. Free-plan reports are public.
Analyse a file for free