General
- Target 2026-08-03_04b8b3752d4b84797d8ed52b837059db_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample260804-d5sa5a1emb
- SHA256 f7e03ec713fa97f19ebca5b83fdc832424ff55afaf0a6c1d2a7abc39858ed253
- MD5 04b8b3752d4b84797d8ed52b837059db
- SHA1 b67eca8358b0fd4e85fde00e4aa237f602979a2b
- SHA512 0d4e78d49a167dffe691cc3d115fd45144d5ad9314cbd370bd5bac12116e45d4ec9c87f3f3065c77895719eb835fad137532b70d53f7ed48e0a3fea53f349e4c
- SSDEEP 49152:YGun7EI6IrPgtxvGjHdzqEBhE/DQXDvCloNV09i2DfoOUkqF7lY2N7M1rDYFFScF:YGIbjpiGB97
- TLSH T181C56B07BCD108E6C4AAA3318AB316557771BC481B3623E72EA0B7782F727C19D76B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_04b8b3752d4b84797d8ed52b837059db_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_04b8b3752d4b84797d8ed52b837059db_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
-
http://tzpx.courses:4437
Targets
-
- Target 2026-08-03_04b8b3752d4b84797d8ed52b837059db_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 f7e03ec713fa97f19ebca5b83fdc832424ff55afaf0a6c1d2a7abc39858ed253
- MD5 04b8b3752d4b84797d8ed52b837059db
- SHA1 b67eca8358b0fd4e85fde00e4aa237f602979a2b
- SHA512 0d4e78d49a167dffe691cc3d115fd45144d5ad9314cbd370bd5bac12116e45d4ec9c87f3f3065c77895719eb835fad137532b70d53f7ed48e0a3fea53f349e4c
- SSDEEP 49152:YGun7EI6IrPgtxvGjHdzqEBhE/DQXDvCloNV09i2DfoOUkqF7lY2N7M1rDYFFScF:YGIbjpiGB97
- TLSH T181C56B07BCD108E6C4AAA3318AB316557771BC481B3623E72EA0B7782F727C19D76B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer