General
- Target 2026-07-01_a23dfc3a4258c050790c5f02d50618b9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.1MB
- Sample260701-xfdk8aet7v
- SHA256 301e2aa14956cf815b865c0c2ac7de438bad6072720d180118ca777779cb0a65
- MD5 a23dfc3a4258c050790c5f02d50618b9
- SHA1 4ba5bfaeb2c62e2a884d478f15fb5bb4b57ab1ed
- SHA512 0842ca6025b54f59799d6c93e3113b11d367a8438d68a0e5385100fd629608e752b6a9e08c8884cf3860a297c3c47d0dfbc0c8c8dba8478f5210fabf82757a14
- SSDEEP 24576:C/93lFTsjlCASRdh5E6HTaUS8KpMRiN5txzBele5rK263xWoPNyfH:C/91FYjlqR3x2UXK3NDgcW
- TLSH T16CA57C4B7CD048E9C4AA673288B651927B34BC1A0F3223D72E90B7782F767E09D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_a23dfc3a4258c050790c5f02d50618b9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_a23dfc3a4258c050790c5f02d50618b9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260630-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://lawofi.xyz:7538
-
http://myrtler.biz:9549
-
http://carogra.biz:4219
Targets
-
- Target 2026-07-01_a23dfc3a4258c050790c5f02d50618b9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.1MB
- SHA256 301e2aa14956cf815b865c0c2ac7de438bad6072720d180118ca777779cb0a65
- MD5 a23dfc3a4258c050790c5f02d50618b9
- SHA1 4ba5bfaeb2c62e2a884d478f15fb5bb4b57ab1ed
- SHA512 0842ca6025b54f59799d6c93e3113b11d367a8438d68a0e5385100fd629608e752b6a9e08c8884cf3860a297c3c47d0dfbc0c8c8dba8478f5210fabf82757a14
- SSDEEP 24576:C/93lFTsjlCASRdh5E6HTaUS8KpMRiN5txzBele5rK263xWoPNyfH:C/91FYjlqR3x2UXK3NDgcW
- TLSH T16CA57C4B7CD048E9C4AA673288B651927B34BC1A0F3223D72E90B7782F767E09D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer