General
- Target 2026-08-01_eb5140e9a33714cd01be88b5061a49fa_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample260801-cymlmacq9t
- SHA256 77cb63776f5432c353e4d344981f19c42b77536049e63d566b6d7b266673b6b5
- MD5 eb5140e9a33714cd01be88b5061a49fa
- SHA1 57efd5d61cfa5b86afb4d6d13f4f581db3e08cef
- SHA512 9a82557462367e2122444bb96d7f39ea055ff8816d76e7d452b3ebe0b2a5f01993f7fbe733f3d8f8b22820af407e16704554439fba4c41c27874e9b10aa6ba81
- SSDEEP 24576:FDsWffdW6bV7vjhzRba/+hSPHjDYrRpcYzpQuhnrR7BPZoBele5I9DUivOKJs/SX:FDd3s61vjh9ba/J/fOhlBCvm
- TLSH T169C56A07BCD109E6C0AAA33189B366527B75BC085B3237E72E80B7782E727D15D39B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_eb5140e9a33714cd01be88b5061a49fa_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_eb5140e9a33714cd01be88b5061a49fa_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
-
http://tzpx.courses:4437
Targets
-
- Target 2026-08-01_eb5140e9a33714cd01be88b5061a49fa_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 77cb63776f5432c353e4d344981f19c42b77536049e63d566b6d7b266673b6b5
- MD5 eb5140e9a33714cd01be88b5061a49fa
- SHA1 57efd5d61cfa5b86afb4d6d13f4f581db3e08cef
- SHA512 9a82557462367e2122444bb96d7f39ea055ff8816d76e7d452b3ebe0b2a5f01993f7fbe733f3d8f8b22820af407e16704554439fba4c41c27874e9b10aa6ba81
- SSDEEP 24576:FDsWffdW6bV7vjhzRba/+hSPHjDYrRpcYzpQuhnrR7BPZoBele5I9DUivOKJs/SX:FDd3s61vjh9ba/J/fOhlBCvm
- TLSH T169C56A07BCD109E6C0AAA33189B366527B75BC085B3237E72E80B7782E727D15D39B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer