General
- Target 2026-07-31_da188b25f2f0e763d6c96cca8eb8209d_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 2.4MB
- Sample260731-25lqcaab86
- SHA256 db5e4419b849b387bca5f2027d6cabbd9b8aa7fa2312a6b5a535cf3168b4fb82
- MD5 da188b25f2f0e763d6c96cca8eb8209d
- SHA1 560e2f839ac85e632566c81672500f5d4147ee0b
- SHA512 e907001800040338b4f68fc128cb72b63e860d7e8535ce23285013494d5e964e866829eeada1c7be07c2b046b49013a3ec756698d72a01a475ac02c146b1ef2e
- SSDEEP 24576:VMJ77rjrMFHMNF9cH/PUpg4z+Hbd1mkWOFB4XvLwfldzBeletrKDX7j7tRD06O:VMpPj2HMxcHUy4z+BQkWq8rb
- TLSH T17EC56B07BCE049E9C4A9933189B752527B35BC084B3673DB2E90BA782F727D09D76B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_da188b25f2f0e763d6c96cca8eb8209d_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_da188b25f2f0e763d6c96cca8eb8209d_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://staxta.click:5627
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
Targets
-
- Target 2026-07-31_da188b25f2f0e763d6c96cca8eb8209d_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 2.4MB
- SHA256 db5e4419b849b387bca5f2027d6cabbd9b8aa7fa2312a6b5a535cf3168b4fb82
- MD5 da188b25f2f0e763d6c96cca8eb8209d
- SHA1 560e2f839ac85e632566c81672500f5d4147ee0b
- SHA512 e907001800040338b4f68fc128cb72b63e860d7e8535ce23285013494d5e964e866829eeada1c7be07c2b046b49013a3ec756698d72a01a475ac02c146b1ef2e
- SSDEEP 24576:VMJ77rjrMFHMNF9cH/PUpg4z+Hbd1mkWOFB4XvLwfldzBeletrKDX7j7tRD06O:VMpPj2HMxcHUy4z+BQkWq8rb
- TLSH T17EC56B07BCE049E9C4A9933189B752527B35BC084B3673DB2E90BA782F727D09D76B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer