General
- Target 2026-07-02_01c84292f2303da6068ef9218cf633c7_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 2.4MB
- Sample260702-kvrp6sdt2r
- SHA256 c439520d25020b8110676ea0f838181ba1fe4f3e63c5401f130160565179321e
- MD5 01c84292f2303da6068ef9218cf633c7
- SHA1 2901284dfc0125312bcbd9a1c9e20ada9713fbc0
- SHA512 8321c5a23d323d509f1322dc30ebfa5dd974a51804c2c5236ae06609e66284bb3cd7a6e1698640554f59b6f2c3dc11425d0ead2e31d2793e767d5252219813bc
- SSDEEP 24576:N/4krlvYqoqMuPoD2iF+1+NN0JfUQdMIrDwnrIIHTvA2Bele5IK2ml4rhDJ+CS36:N/4aJYOMhDXYAqVdbDwS8+ZiE
- TLSH T1BFC54A03ECA209EAC4AA633189B39296B775BC491F3223D72E90B7783E767D05C35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_01c84292f2303da6068ef9218cf633c7_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_01c84292f2303da6068ef9218cf633c7_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://orderre.shop:4190
-
http://carogra.biz:4219
-
http://myrtler.biz:9549
Targets
-
- Target 2026-07-02_01c84292f2303da6068ef9218cf633c7_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 2.4MB
- SHA256 c439520d25020b8110676ea0f838181ba1fe4f3e63c5401f130160565179321e
- MD5 01c84292f2303da6068ef9218cf633c7
- SHA1 2901284dfc0125312bcbd9a1c9e20ada9713fbc0
- SHA512 8321c5a23d323d509f1322dc30ebfa5dd974a51804c2c5236ae06609e66284bb3cd7a6e1698640554f59b6f2c3dc11425d0ead2e31d2793e767d5252219813bc
- SSDEEP 24576:N/4krlvYqoqMuPoD2iF+1+NN0JfUQdMIrDwnrIIHTvA2Bele5IK2ml4rhDJ+CS36:N/4aJYOMhDXYAqVdbDwS8+ZiE
- TLSH T1BFC54A03ECA209EAC4AA633189B39296B775BC491F3223D72E90B7783E767D05C35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer