MB-bbd0ecd8addc89b045dcca50bb501dec7987bc96f68b5f05e67d9ad559f6ab6f
high
📛 Threat Title
SalatStealer: CS2_Ultimate_Optimizer.bat
Description
File type: bat. Size: 14780958 bytes. Tags: bat, SalatStealer. Reporter: abuse_ch. First seen: 2026-11-08 10:50:58.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
bbd0ecd8addc89b045dcca50bb501dec7987bc96f68b5f05e67d9ad559f6ab6f
VT 4 / 75
IOC database
- Type
- hash_sha256
- Value
bbd0ecd8addc89b045dcca50bb501dec7987bc96f68b5f05e67d9ad559f6ab6f- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- URLhaus payload hash attributed to SalatStealer
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Flagged by 4 of 75 VirusTotal vendors
| Vendor | Verdict | Detection |
|---|---|---|
| DrWeb | malicious | BAT.Drop.3029 |
| huorong | malicious | TrojanDropper/BAT.Agent.fp |
| Kingsoft | malicious | Script.Troj.bat.2024083 |
| Sangfor | malicious | Malware.Generic-HTML.Save.61eb41a5 |
Details From VirusTotal
Basic Properties
| MD5 | 24031f0fa6d773bcf7486f63a3c9a2c9 |
| SHA-1 | e7fe1b093171b5592d477ef2731afe14ff848246 |
| SHA-256 | bbd0ecd8addc89b045dcca50bb501dec7987bc96f68b5f05e67d9ad559f6ab6f |
| VHash | 1196ba3ad3d1509669d570e9ee6ba37c |
| SSDEEP | 24576:web/J7CGCbAvP7Ixx0C6L75G7t8vURd+9TaGlERZ1Eyl8RA2iWPbksg/+p2GJ25U:V |
| TLSH | T17AE65CF82627EE42E23B8719D6DCBE894B3933578AC51E90A33CF59119D7301BE1D489 |
| File type | VBA |
| File type tag | vba |
| Magic | DOS batch file, ASCII text, with very long lines (1776u), with CRLF line terminators |
| File size | 14.1 MB |
History
| First seen on VirusTotal | 2026-11-07 17:51 UTC |
| Last submission | 2026-11-07 17:51 UTC |
| Last analysis | 2026-11-07 17:51 UTC |
| Last modified on VirusTotal | 2026-11-07 22:33 UTC |
Known Names
00cf9b42-9596-4638-b87b-1dc81b8a188ac33ee74c-c034-4e5d-909f-df49150477879769dd08-3faf-421b-b936-9d171168ac467b640c57-fa2d-4de8-a4e1-9b6d40b04dded9d4e84b-96d0-4b72-8026-3ca3658e9c256941aabb-dbd5-4d69-860f-0fd4a32f43ba2a495d83-b01c-4f93-af80-913844831d4673b0b6cd-aa3d-4941-8552-86ffc153ab22a7e18f6b-3e01-4c25-92b2-22491b9d9a3aa5181cc3-56ee-4008-90ee-d22ae67503ca
hash_md5
24031f0fa6d773bcf7486f63a3c9a2c9
VT: VT base fetch failed: HTTPError: 401 Client Error: Unauthorized for url: https://www.virustotal.com/api/v3/files/24031f0fa6d773bcf7486f63a3c9a2c9
IOC database
- Type
- hash_md5
- Value
24031f0fa6d773bcf7486f63a3c9a2c9- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- URLhaus payload hash attributed to SalatStealer
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 401 Client Error: Unauthorized for url: https://www.virustotal.com/api/v3/files/24031f0fa6d773bcf7486f63a3c9a2c9
hash_sha1
e7fe1b093171b5592d477ef2731afe14ff848246
IOC database
- Type
- hash_sha1
- Value
e7fe1b093171b5592d477ef2731afe14ff848246- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: bat. Size: 14780958 bytes. Tags: bat, SalatStealer. Reporter: abuse_ch. First seen: 2026-11-08 10:50:58.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.