General
- Target 2026-07-22_97984e0fe1aa0991ba37be2e000079af_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 35.5MB
- Sample260722-14ysvawbqa
- SHA256 2050abe4cbc5d1b26142fd16c3ae1cc25f55ed3bd9de5588df5bd615319f3a62
- MD5 97984e0fe1aa0991ba37be2e000079af
- SHA1 152c03dc6a31ee39097daf68acc7b0b180080139
- SHA512 4180ef99231f2f49154a79397387be6c8f56b81a863aa9bebed4512222d1ce413bd48791aa0552b3a01470235fc1edd45318263729f332f8e072d4df12d35546
- SSDEEP 49152:dIaTZ+ulvaI/vhtjgpkKKtGGcsKalNhRSIvn+:dzZFUKtTjjYIP+
- TLSH T110874B17AD9148E5C099D231C9B69656BB76BC080B3237E72E90BF782F727D05D3AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_97984e0fe1aa0991ba37be2e000079af_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_97984e0fe1aa0991ba37be2e000079af_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://tzpx.courses:4437
-
http://carogra.biz:4219
-
http://zelpx.garden:9895
Targets
-
- Target 2026-07-22_97984e0fe1aa0991ba37be2e000079af_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 35.5MB
- SHA256 2050abe4cbc5d1b26142fd16c3ae1cc25f55ed3bd9de5588df5bd615319f3a62
- MD5 97984e0fe1aa0991ba37be2e000079af
- SHA1 152c03dc6a31ee39097daf68acc7b0b180080139
- SHA512 4180ef99231f2f49154a79397387be6c8f56b81a863aa9bebed4512222d1ce413bd48791aa0552b3a01470235fc1edd45318263729f332f8e072d4df12d35546
- SSDEEP 49152:dIaTZ+ulvaI/vhtjgpkKKtGGcsKalNhRSIvn+:dzZFUKtTjjYIP+
- TLSH T110874B17AD9148E5C099D231C9B69656BB76BC080B3237E72E90BF782F727D05D3AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer