General
- Target 2026-07-22_93f42f6a8ad4d17e110ab828423a2c39_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 9.5MB
- Sample260722-15aseacg67
- SHA256 93e3e595ca074fba769de1d9749177f2d520f870f1a702bc79fb45a9b6bfa315
- MD5 93f42f6a8ad4d17e110ab828423a2c39
- SHA1 9a1cc7f7a3eaa58fd47979b868a6a03e44abc2fb
- SHA512 1b8535cc8e39ff327bce786069217ae8b951589f4cebd9dd29931a0a8a428fc8d1f27d06f7e6b6f0bd271facc96dfc4846d8cb978856afb58964ac52ab148fe9
- SSDEEP 49152:o59vOiPXNTk+ndaoKNsSb1BnDvzpXIRhc+kFE/:o5Rln8mRhcbw
- TLSH T14EA649177CD189F9C09AA331C9B65296B771BC090B3533D72EA07A782E727D09D3AB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_93f42f6a8ad4d17e110ab828423a2c39_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_93f42f6a8ad4d17e110ab828423a2c39_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://fimmora.surf:6504
-
http://tzpx.courses:4437
-
http://zelpx.garden:9895
Targets
-
- Target 2026-07-22_93f42f6a8ad4d17e110ab828423a2c39_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 9.5MB
- SHA256 93e3e595ca074fba769de1d9749177f2d520f870f1a702bc79fb45a9b6bfa315
- MD5 93f42f6a8ad4d17e110ab828423a2c39
- SHA1 9a1cc7f7a3eaa58fd47979b868a6a03e44abc2fb
- SHA512 1b8535cc8e39ff327bce786069217ae8b951589f4cebd9dd29931a0a8a428fc8d1f27d06f7e6b6f0bd271facc96dfc4846d8cb978856afb58964ac52ab148fe9
- SSDEEP 49152:o59vOiPXNTk+ndaoKNsSb1BnDvzpXIRhc+kFE/:o5Rln8mRhcbw
- TLSH T14EA649177CD189F9C09AA331C9B65296B771BC090B3533D72EA07A782E727D09D3AB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer