General
- Target 2026-07-22_cebcfb48e36d0b0cb424d0c8155624a7_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.8MB
- Sample260722-1zwspacf83
- SHA256 6ba26be4e1fa2370d1ebcb4604420ef6e51273deb1c880bcdabc853313305f4f
- MD5 cebcfb48e36d0b0cb424d0c8155624a7
- SHA1 263d2ea2387d11750d77038bfbcd4a5f04000a5b
- SHA512 73930021a6c210a84300e33bc98ff4bba44829f634222ab10a8596becb3c4c6385ac91833a50bbf7be404a05ee2e8baec9e511d65588830b11bf14ea143764f7
- SSDEEP 49152:WVm70B5LgFflpvS8gbAYkPugeSWabzCbo:WpnOPgAveAX
- TLSH T1E9D54A07FCA148E6C0AAA33189B29656B735BC081B3237D72E907B782F727D05D79B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_cebcfb48e36d0b0cb424d0c8155624a7_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_cebcfb48e36d0b0cb424d0c8155624a7_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://carogra.biz:4219
-
http://tzpx.courses:4437
-
http://zelpx.garden:9895
Targets
-
- Target 2026-07-22_cebcfb48e36d0b0cb424d0c8155624a7_coinminer_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.8MB
- SHA256 6ba26be4e1fa2370d1ebcb4604420ef6e51273deb1c880bcdabc853313305f4f
- MD5 cebcfb48e36d0b0cb424d0c8155624a7
- SHA1 263d2ea2387d11750d77038bfbcd4a5f04000a5b
- SHA512 73930021a6c210a84300e33bc98ff4bba44829f634222ab10a8596becb3c4c6385ac91833a50bbf7be404a05ee2e8baec9e511d65588830b11bf14ea143764f7
- SSDEEP 49152:WVm70B5LgFflpvS8gbAYkPugeSWabzCbo:WpnOPgAveAX
- TLSH T1E9D54A07FCA148E6C0AAA33189B29656B735BC081B3237D72E907B782F727D05D79B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Remus stealer