Malicious
ZIP Archive
MD5: da42e02d778bf0e0007927a972d6588b
Size: 3.59 MB
application/zip
Ctrl + scroll to zoom · drag to pan
This sample is a 3.4 MB ZIP Archive identified by Malva.RE as Salat Stealer (stealer). Static analysis extracted 2 embedded or derived files. It matches 4 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 1e47db779a486ffad0b5b7ea6b7be5a9598d22d0d4b4df0541003ea744f5d47c
- MD5
- da42e02d778bf0e0007927a972d6588b
- Verdict
- Malicious
- File type
- ZIP Archive · 3.4 MB
- Family
- Salat Stealer
- Category
- Stealer
Cite this report: https://app.malva.re/sha256/1e47db779a486ffad0b5b7ea6b7be5a9598d22d0d4b4df0541003ea744f5d47c
Related Salat Stealer samples
- 94cd3079455b2c4e3a1d93ed3b9797490d46d17d975b0f4d2453d6bb0bf0189e 2026-11-02
- dfc1d2ddb25557c2d705fd0324d49a379158e9acfeb0d95e0bb63c21624686cc 2026-11-02
- 861341ebac1af1047c240fa2d349d57599c1ff28d85fa035d0611fc581cef181 2026-11-02
- 7802b936027bad7c5eba809ba01a4c495cff1922355ad5a1bf32fab2256e54fe 2026-11-02
- fa18cc722d8d95f790dd7e51d50ea3c84b2492fbe68d0f131e46bedd8a0a9d14 2026-11-02
- 040dfd78f8e10fb48b71be50e84305a6eb8ddc16f7234b0c3e0cb1d159db2f40 2026-11-02
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
3.59 MB · 3,594,466 B
First seen
2026-11-01 11:15 · yesterday
Last seen
2026-11-01 11:15 · yesterday
Last analysis
2026-11-01 11:15 · yesterday
Hashes
MD5
da42e02d778bf0e0007927a972d6588b
Sha1
9661397ef891aebe286f6419dc68eeab5f5f913c
Sha256
1e47db779a486ffad0b5b7ea6b7be5a9598d22d0d4b4df0541003ea744f5d47c
Sha384
2534b147100dfaeac73c3b40c3233b1a94db2eb4c16ebac09f2dfda135230672f025f7a5456a550024e68e0d362cbc07
Sha512
1e5196be5d207b1b537642e6d7b2433c95bd024a15644651ea33234f4b11ef0336e248214f6612d2f43bb001074e32d4210b903cccd01c038410a30c9f235415
SSDeep
98304:dYJZZV5/oPj20d8fq335W9/di+jxdJ956Vx/GX:dYJZZ7/tE35aVV3axuX
TLSH
79F53335F79073C6C8E9239581D3DC0EB2657666FD12932A10BCEDFB21A351B8D82972
3 malicious · 3 files
ZIPda42e02d778bf0e0007927a972d6588bSalat Stealer
EXEsetup-Happ.x64.exeSalat Stealer
Structure
EXE[UPX unpacked Lzma].exeSalat Stealer
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>pe:exe
Shape
arc:zip>pe:exe
malicious
2 nodes