General
- Target 2026-08-08_9accabb17ba44a4264db13c25f6cc85c_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.1MB
- Sample260808-dkl9da11fs
- SHA256 d7a4b7f58ff01098f9739903dbe0e134083dcd996cb76af5ba28948ff0b4ddd2
- MD5 9accabb17ba44a4264db13c25f6cc85c
- SHA1 3bc16c36d512bef36fe0993ce4b1dc7062bfeda8
- SHA512 4bf177d75fa0a5a4fad382572f5d10b501b997abc8c3d2eca9d4f69e7b8aaea0b5a3496bb2c2c109ba75461a1117d3615ddf9b965515d41ed5935d4ae8319e29
- SSDEEP 24576:pSw+UINJ0WSQKPs/iZJaWyP6sLRoSLi3cSKqsppFHKsVyPzv/JBele5r9D9COZQe:pSwVIj0W+k/QJdy/uSLRqsp7Fw7rdz
- TLSH T1B3E55B03AD9048F9C0A9E73989774616BB74B809473173EB2EA0BEB52F723D05E35794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_9accabb17ba44a4264db13c25f6cc85c_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_9accabb17ba44a4264db13c25f6cc85c_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://azurhay.shop:8539
-
http://slyfogx.shop:5776
-
http://onesdto.shop:2535
Targets
-
- Target 2026-08-08_9accabb17ba44a4264db13c25f6cc85c_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 3.1MB
- SHA256 d7a4b7f58ff01098f9739903dbe0e134083dcd996cb76af5ba28948ff0b4ddd2
- MD5 9accabb17ba44a4264db13c25f6cc85c
- SHA1 3bc16c36d512bef36fe0993ce4b1dc7062bfeda8
- SHA512 4bf177d75fa0a5a4fad382572f5d10b501b997abc8c3d2eca9d4f69e7b8aaea0b5a3496bb2c2c109ba75461a1117d3615ddf9b965515d41ed5935d4ae8319e29
- SSDEEP 24576:pSw+UINJ0WSQKPs/iZJaWyP6sLRoSLi3cSKqsppFHKsVyPzv/JBele5r9D9COZQe:pSwVIj0W+k/QJdy/uSLRqsp7Fw7rdz
- TLSH T1B3E55B03AD9048F9C0A9E73989774616BB74B809473173EB2EA0BEB52F723D05E35794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer