General
- Target 2026-08-01_9e3b6fd3e781c3c17d419301119a9037_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 2.3MB
- Sample260802-af2xgsag46
- SHA256 1d05aca79f04051b4a774d9020589944b310200c33bbb69255bec4f60f451085
- MD5 9e3b6fd3e781c3c17d419301119a9037
- SHA1 ea0b480ac8383829832af8d716606a557aa188d5
- SHA512 72f18545f6055dd0275c3fd4ec1b52b1556ae356dcb5dae767d46443ca1576c343d377a82fac842bcbb5333cfab06655bb7ab876a8ee50f229dcafaf4e043310
- SSDEEP 24576:HNdcfS7oyV4niV8jOtlZDGQEv1UXEx05l8uFccT3olgldzBeletrKDX7jIQRD065:HNdGSUyVlV8OzZDQNUXs05l8aFEQ8hb5
- TLSH T1DBB55A07BCE049E9C4A9933189B752527B31BC084B3273DB2E90BA782F727D09D76B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_9e3b6fd3e781c3c17d419301119a9037_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_9e3b6fd3e781c3c17d419301119a9037_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
-
http://tzpx.courses:4437
Targets
-
- Target 2026-08-01_9e3b6fd3e781c3c17d419301119a9037_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
- Size 2.3MB
- SHA256 1d05aca79f04051b4a774d9020589944b310200c33bbb69255bec4f60f451085
- MD5 9e3b6fd3e781c3c17d419301119a9037
- SHA1 ea0b480ac8383829832af8d716606a557aa188d5
- SHA512 72f18545f6055dd0275c3fd4ec1b52b1556ae356dcb5dae767d46443ca1576c343d377a82fac842bcbb5333cfab06655bb7ab876a8ee50f229dcafaf4e043310
- SSDEEP 24576:HNdcfS7oyV4niV8jOtlZDGQEv1UXEx05l8uFccT3olgldzBeletrKDX7jIQRD065:HNdGSUyVlV8OzZDQNUXs05l8aFEQ8hb5
- TLSH T1DBB55A07BCE049E9C4A9933189B752527B31BC084B3273DB2E90BA782F727D09D76B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer