General
- Target 2026-07-31_b70016c2532ffc2c041040efce58d037_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 2.6MB
- Sample260731-3brvyaac76
- SHA256 fa77709baf5d398b0477271d75bf1f3b43e74f025a33f99e5fce4efc3bdd2dc5
- MD5 b70016c2532ffc2c041040efce58d037
- SHA1 7da50aeca3587f4b89c944a2bd549dc666eace18
- SHA512 6405435cee0e6c339d79365863283895f18631b752d87bb30c0569a169ff5131a1150ea09442d00e900cb74b5a14ffa443e0080cd54a903c5fadcfbec2a6286e
- SSDEEP 24576:k+wrJJqGpj442N8XgGqHwsAffaQ4uktMfCMXeYJwGHmGzTdaxoITVBtGEUKvA2B0:k+UDPd/SegPws6aEaOCM1FGVZjYG3q
- TLSH T171C56B07BCD148E6C0AA933189B642567B74BC094B3227EB2E90BB783F727D05D36B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_b70016c2532ffc2c041040efce58d037_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_b70016c2532ffc2c041040efce58d037_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://vifroup.biz:7527
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
Targets
-
- Target 2026-07-31_b70016c2532ffc2c041040efce58d037_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 2.6MB
- SHA256 fa77709baf5d398b0477271d75bf1f3b43e74f025a33f99e5fce4efc3bdd2dc5
- MD5 b70016c2532ffc2c041040efce58d037
- SHA1 7da50aeca3587f4b89c944a2bd549dc666eace18
- SHA512 6405435cee0e6c339d79365863283895f18631b752d87bb30c0569a169ff5131a1150ea09442d00e900cb74b5a14ffa443e0080cd54a903c5fadcfbec2a6286e
- SSDEEP 24576:k+wrJJqGpj442N8XgGqHwsAffaQ4uktMfCMXeYJwGHmGzTdaxoITVBtGEUKvA2B0:k+UDPd/SegPws6aEaOCM1FGVZjYG3q
- TLSH T171C56B07BCD148E6C0AA933189B642567B74BC094B3227EB2E90BB783F727D05D36B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer