General
- Target 2026-08-08_fe06a5a33af69501080cd409b055c48c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.8MB
- Sample260809-aac16sz1a1
- SHA256 7eefd1f74b5e4f4c0038c243792e601e91634ab194c2ca91442b4d6c18344735
- MD5 fe06a5a33af69501080cd409b055c48c
- SHA1 2f76bc5db1c47f2af3d3ad89c5aa5a16ae0d346a
- SHA512 a0dee20739ef820f02010117d07f547d1c8831f4c665227b05d67f8bc99b8ca9ad38593e6604d3da6b9d530545601cdf11fe581f9fc4944d01bb624abbf82140
- SSDEEP 49152:cv+f22yDCZq/md/FFsHFnT7VajkLY2Sukgy9NcW:cAx/rsx7VarZum9
- TLSH T137D55A03FDA149F6C09AA33589B366527B75BC481B3227E72E90B6782F723D09D35B14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_fe06a5a33af69501080cd409b055c48c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_fe06a5a33af69501080cd409b055c48c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
-
http://tzpx.courses:4437
Targets
-
- Target 2026-08-08_fe06a5a33af69501080cd409b055c48c_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.8MB
- SHA256 7eefd1f74b5e4f4c0038c243792e601e91634ab194c2ca91442b4d6c18344735
- MD5 fe06a5a33af69501080cd409b055c48c
- SHA1 2f76bc5db1c47f2af3d3ad89c5aa5a16ae0d346a
- SHA512 a0dee20739ef820f02010117d07f547d1c8831f4c665227b05d67f8bc99b8ca9ad38593e6604d3da6b9d530545601cdf11fe581f9fc4944d01bb624abbf82140
- SSDEEP 49152:cv+f22yDCZq/md/FFsHFnT7VajkLY2Sukgy9NcW:cAx/rsx7VarZum9
- TLSH T137D55A03FDA149F6C09AA33589B366527B75BC481B3227E72E90B6782F723D09D35B14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer