General
- Target 2026-07-31_e27af1a650e95047f7b995cc6929f94e_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 2.6MB
- Sample260731-239dmaal6t
- SHA256 fed541de0e768a6132da368ec8e0c66125ed7c144ca7d039bbcfe7b75192ecaa
- MD5 e27af1a650e95047f7b995cc6929f94e
- SHA1 859a5f150f6028fe660051755fb4e7b35d392359
- SHA512 087544bec3fb3ea8438f2147f4938c79a9e744d23672dc24d5f4a7f3a283a5a1b11b5356ce34aec7a4549b5c554d4be53d930d118c8b40417c2ffccab29b03ca
- SSDEEP 49152:M9ECjYrunrelSLeCuwCu+g0gdgVfK1uYDt:MHYSu/gofK1u
- TLSH T197C55B07BCD148E6C0AA933189B756567B74BC080B3227EB2E90BA783F727D05D36B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_e27af1a650e95047f7b995cc6929f94e_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_e27af1a650e95047f7b995cc6929f94e_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://vifroup.biz:7527
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
Targets
-
- Target 2026-07-31_e27af1a650e95047f7b995cc6929f94e_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 2.6MB
- SHA256 fed541de0e768a6132da368ec8e0c66125ed7c144ca7d039bbcfe7b75192ecaa
- MD5 e27af1a650e95047f7b995cc6929f94e
- SHA1 859a5f150f6028fe660051755fb4e7b35d392359
- SHA512 087544bec3fb3ea8438f2147f4938c79a9e744d23672dc24d5f4a7f3a283a5a1b11b5356ce34aec7a4549b5c554d4be53d930d118c8b40417c2ffccab29b03ca
- SSDEEP 49152:M9ECjYrunrelSLeCuwCu+g0gdgVfK1uYDt:MHYSu/gofK1u
- TLSH T197C55B07BCD148E6C0AA933189B756567B74BC080B3227EB2E90BA783F727D05D36B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer