General
- Target 2026-07-19_3c62153829bc1fb1ba5c95d76a315bcb_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 35.9MB
- Sample260719-2yy24aez2q
- SHA256 48a953a9c2af5dfb5ab15e048680ed623521569ff44d4424e615252542a061d6
- MD5 3c62153829bc1fb1ba5c95d76a315bcb
- SHA1 8d503f59851b0e0f2ad3bf39e1cdbb08b75fc23b
- SHA512 4766daab3888c9b5140027b6ec145c0135826f64350b774e63d3b86724cd8dedb98307cd1e9504915473f90f328930e685f754d9d14d329c619dd5d87f11afc0
- SSDEEP 24576:bLKNvbNlXX3bcz3/l7JcN4wzqVDxF1gD942EobXiNnZ31gFoBeletI9DOiCy84I+:bLKdzX7cL/l1cAVj1gD9viNZ2kq78cR
- TLSH T1F4874A07FCA108F6C099A331C9A79642BB75BC091B3623E72EA0BB782E727D05D75715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_3c62153829bc1fb1ba5c95d76a315bcb_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_3c62153829bc1fb1ba5c95d76a315bcb_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://tzpx.courses:4437
-
http://zelpx.garden:9895
-
http://carogra.biz:4219
Targets
-
- Target 2026-07-19_3c62153829bc1fb1ba5c95d76a315bcb_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 35.9MB
- SHA256 48a953a9c2af5dfb5ab15e048680ed623521569ff44d4424e615252542a061d6
- MD5 3c62153829bc1fb1ba5c95d76a315bcb
- SHA1 8d503f59851b0e0f2ad3bf39e1cdbb08b75fc23b
- SHA512 4766daab3888c9b5140027b6ec145c0135826f64350b774e63d3b86724cd8dedb98307cd1e9504915473f90f328930e685f754d9d14d329c619dd5d87f11afc0
- SSDEEP 24576:bLKNvbNlXX3bcz3/l7JcN4wzqVDxF1gD942EobXiNnZ31gFoBeletI9DOiCy84I+:bLKdzX7cL/l1cAVj1gD9viNZ2kq78cR
- TLSH T1F4874A07FCA108F6C099A331C9A79642BB75BC091B3623E72EA0BB782E727D05D75715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer