General
- Target 2026-08-06_2bbaee0345fbcf0e2c43dcd347b36fd9_amadey_cobalt-strike_darkgate_frostygoop_glassworm_hijackloader_hive_knight_luca-stealer_salatstealer_satacom_sliver_stealc_vidar
- Size 13.0MB
- Sample260807-bbganadp7s
- SHA256 67cd5f1b19d33786a9f73b630357cce0d90d6771590ccb965fb331ffc6d4fb94
- MD5 2bbaee0345fbcf0e2c43dcd347b36fd9
- SHA1 92992d4ba3c76c670219d041be921a1569d1ad1f
- SHA512 0f8741fa6f13e895717c9b27ed3d9346cbb3c3ec159126b2b05fe17042a89d8d76d7f349c829dd97d899d474651562aa55dac326324940b723844e9b8b38245d
- SSDEEP 98304:m62hn+eRCieo4pcoFjnm+IZzJTVR2JNK/Td3S74ZuPhE:m6nELo5m+IZzJTVMJI/5Y4cW
- TLSH T16AD6BF027AE444E5E0BB9330C9B69552BB35BC054B31A7DF2A90B67C2E737C09E3571A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_2bbaee0345fbcf0e2c43dcd347b36fd9_amadey_cobalt-strike_darkgate_frostygoop_glassworm_hijac.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_2bbaee0345fbcf0e2c43dcd347b36fd9_amadey_cobalt-strike_darkgate_frostygoop_glassworm_hijac.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://tzpx.courses:4437
-
http://carogra.biz:4219
Targets
-
- Target 2026-08-06_2bbaee0345fbcf0e2c43dcd347b36fd9_amadey_cobalt-strike_darkgate_frostygoop_glassworm_hijackloader_hive_knight_luca-stealer_salatstealer_satacom_sliver_stealc_vidar
- Size 13.0MB
- SHA256 67cd5f1b19d33786a9f73b630357cce0d90d6771590ccb965fb331ffc6d4fb94
- MD5 2bbaee0345fbcf0e2c43dcd347b36fd9
- SHA1 92992d4ba3c76c670219d041be921a1569d1ad1f
- SHA512 0f8741fa6f13e895717c9b27ed3d9346cbb3c3ec159126b2b05fe17042a89d8d76d7f349c829dd97d899d474651562aa55dac326324940b723844e9b8b38245d
- SSDEEP 98304:m62hn+eRCieo4pcoFjnm+IZzJTVR2JNK/Td3S74ZuPhE:m6nELo5m+IZzJTVMJI/5Y4cW
- TLSH T16AD6BF027AE444E5E0BB9330C9B69552BB35BC054B31A7DF2A90B67C2E737C09E3571A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer