General
- Target 2026-08-08_5d99a438be1c6c70d622eafb02a52acc_amadey_cobalt-strike_frostygoop_glassworm_hijackloader_hive_knight_luca-stealer_salatstealer_satacom_sliver_stealc_vidar
- Size 10.0MB
- Sample260808-2qlf2azvex
- SHA256 9af9d94c8a5d8ed9c054c7da89de1be53b2b5eb578f73bb9c5374bc7732d4b65
- MD5 5d99a438be1c6c70d622eafb02a52acc
- SHA1 5d33f1a2242f12bda5583996c1544d604985177a
- SHA512 2a617c4dcee5ceed80a3ae931b84e835432320819b477a0dd0e72e29346f20ac7389736cf69161463f34d2037e5178eac1c0d0cbd8df19c07f8a7d3e8cd18956
- SSDEEP 98304:We77ZZv25pVPKJguMCuErbZbuyXhNfqiMOmUyURGAotM:Wcb2YzMArNf1nyURtz
- TLSH T14AB6AE03BBE804B5E1A7973089B78612BB75BC590B3163DB2A90B67C2E737D09E34715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_5d99a438be1c6c70d622eafb02a52acc_amadey_cobalt-strike_frostygoop_glassworm_hijackloader_h.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_5d99a438be1c6c70d622eafb02a52acc_amadey_cobalt-strike_frostygoop_glassworm_hijackloader_h.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://onesdto.shop:2535
-
http://azurhay.shop:8539
-
http://slyfogx.shop:5776
Targets
-
- Target 2026-08-08_5d99a438be1c6c70d622eafb02a52acc_amadey_cobalt-strike_frostygoop_glassworm_hijackloader_hive_knight_luca-stealer_salatstealer_satacom_sliver_stealc_vidar
- Size 10.0MB
- SHA256 9af9d94c8a5d8ed9c054c7da89de1be53b2b5eb578f73bb9c5374bc7732d4b65
- MD5 5d99a438be1c6c70d622eafb02a52acc
- SHA1 5d33f1a2242f12bda5583996c1544d604985177a
- SHA512 2a617c4dcee5ceed80a3ae931b84e835432320819b477a0dd0e72e29346f20ac7389736cf69161463f34d2037e5178eac1c0d0cbd8df19c07f8a7d3e8cd18956
- SSDEEP 98304:We77ZZv25pVPKJguMCuErbZbuyXhNfqiMOmUyURGAotM:Wcb2YzMArNf1nyURtz
- TLSH T14AB6AE03BBE804B5E1A7973089B78612BB75BC590B3163DB2A90B67C2E737D09E34715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer