General
- Target 2026-08-10_1c49a797a979d3532553a2c6885d4a09_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.0MB
- Sample260810-hhsetscq6s
- SHA256 a86fda9d27e347326fdc067d1e72b068ceb455d8b6fbaf7c6a18d7125fb3f38e
- MD5 1c49a797a979d3532553a2c6885d4a09
- SHA1 ecadccb96ccfaf74bb100e449a1766acb27714c5
- SHA512 fe93dfe3dc7a8c66376c46cbaa8f12f37b1e5699cecbd8ac6425e71eda60a1537ccff8e692230a60a3209f456e0262f1f163baf034bbf6a31546459fc55fb7a9
- SSDEEP 49152:DOuoXUPrHHrfb4u5xA1SZM2Us1PvOzX0+A0KH6N:DC0P5xNO3duq
- TLSH T1D6163803AE9648F5C1D5E73589B74252BA74BC4C4B3133E32EA0AAB42F763D06E74B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1c49a797a979d3532553a2c6885d4a09_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1c49a797a979d3532553a2c6885d4a09_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://onesdto.shop:2535
-
http://slyfogx.shop:5776
-
http://azurhay.shop:8539
Targets
-
- Target 2026-08-10_1c49a797a979d3532553a2c6885d4a09_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.0MB
- SHA256 a86fda9d27e347326fdc067d1e72b068ceb455d8b6fbaf7c6a18d7125fb3f38e
- MD5 1c49a797a979d3532553a2c6885d4a09
- SHA1 ecadccb96ccfaf74bb100e449a1766acb27714c5
- SHA512 fe93dfe3dc7a8c66376c46cbaa8f12f37b1e5699cecbd8ac6425e71eda60a1537ccff8e692230a60a3209f456e0262f1f163baf034bbf6a31546459fc55fb7a9
- SSDEEP 49152:DOuoXUPrHHrfb4u5xA1SZM2Us1PvOzX0+A0KH6N:DC0P5xNO3duq
- TLSH T1D6163803AE9648F5C1D5E73589B74252BA74BC4C4B3133E32EA0AAB42F763D06E74B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer