General
- Target 2026-07-19_7ed591cb63556c9df3ccc1077c9a434d_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 46.6MB
- Sample260720-bjfdbsdw71
- SHA256 93f44970a8af6f0f348f79843fb0e182d5057e4eb4e3a0623b1aebf27251fe5d
- MD5 7ed591cb63556c9df3ccc1077c9a434d
- SHA1 e313d6933faa4dda9cc8667d3c4926f0186249a7
- SHA512 72408c57a9106a0c6c919d67b8da1bff4c6ad8697acf8e7db5e6f9d25be77feb7771e65249096fd2e838323788a8bdb32af77af08f1a3656174fd94e0d700e2e
- SSDEEP 49152:BixUPCYWAuvNx8GxHvGy5jqU751C1LK25an:BXKHAU751C1+KC
- TLSH T153B74917BC9148EAC0A9A331C9B65246BB35BC081B3637EB2E90BB782F727D05D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_7ed591cb63556c9df3ccc1077c9a434d_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_7ed591cb63556c9df3ccc1077c9a434d_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://tzpx.courses:4437
-
http://zelpx.garden:9895
-
http://carogra.biz:4219
Targets
-
- Target 2026-07-19_7ed591cb63556c9df3ccc1077c9a434d_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 46.6MB
- SHA256 93f44970a8af6f0f348f79843fb0e182d5057e4eb4e3a0623b1aebf27251fe5d
- MD5 7ed591cb63556c9df3ccc1077c9a434d
- SHA1 e313d6933faa4dda9cc8667d3c4926f0186249a7
- SHA512 72408c57a9106a0c6c919d67b8da1bff4c6ad8697acf8e7db5e6f9d25be77feb7771e65249096fd2e838323788a8bdb32af77af08f1a3656174fd94e0d700e2e
- SSDEEP 49152:BixUPCYWAuvNx8GxHvGy5jqU751C1LK25an:BXKHAU751C1+KC
- TLSH T153B74917BC9148EAC0A9A331C9B65246BB35BC081B3637EB2E90BB782F727D05D35754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer