General
- Target 2026-07-29_c7245b5bd4286b8fd1c2ae7c7d122944_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.6MB
- Sample260729-padp2avyby
- SHA256 b2e4a404301b6b1ad37caaba19951cc5b8975591023d6ff209ec3c1130e4cd8b
- MD5 c7245b5bd4286b8fd1c2ae7c7d122944
- SHA1 885768033028b9d5a22b43f6b4b160d1a24bdba8
- SHA512 c29184bfbdc4dac3cbfb00adbcd191af75db97fd0fd04efeac2ebfdc7c167e0ae463bee41b122b47d6191d56baaac86eace6e4c07ec8dca86b16b6c0ae1c730b
- SSDEEP 24576:/VIV4tKAUV1vJyWPEgpmEG8trfkpc+QU/prkjsDPvA2Bele5rK2y0HEcWF5m0UbI:/VI+t9U/JR5oF8fU/pr5B8OOcx
- TLSH T15CD54907BD9189E9C09E9231C8B691A67B75BC084F3223DB2E90BB783E727D05D35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_c7245b5bd4286b8fd1c2ae7c7d122944_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_c7245b5bd4286b8fd1c2ae7c7d122944_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://carogra.biz:4219
-
http://columna.lol:6590
-
http://geminyw.xyz:5003
Targets
-
- Target 2026-07-29_c7245b5bd4286b8fd1c2ae7c7d122944_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.6MB
- SHA256 b2e4a404301b6b1ad37caaba19951cc5b8975591023d6ff209ec3c1130e4cd8b
- MD5 c7245b5bd4286b8fd1c2ae7c7d122944
- SHA1 885768033028b9d5a22b43f6b4b160d1a24bdba8
- SHA512 c29184bfbdc4dac3cbfb00adbcd191af75db97fd0fd04efeac2ebfdc7c167e0ae463bee41b122b47d6191d56baaac86eace6e4c07ec8dca86b16b6c0ae1c730b
- SSDEEP 24576:/VIV4tKAUV1vJyWPEgpmEG8trfkpc+QU/prkjsDPvA2Bele5rK2y0HEcWF5m0UbI:/VI+t9U/JR5oF8fU/pr5B8OOcx
- TLSH T15CD54907BD9189E9C09E9231C8B691A67B75BC084F3223DB2E90BB783E727D05D35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer