General
- Target 2026-08-12_cc91844b5e093ea021a6f38ce97c0dcd_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.6MB
- Sample260812-1sssfsvglb
- SHA256 824570f6c57659b61ba7f8dad31d7cd37d61d58b417bda953a5eaa0b064df328
- MD5 cc91844b5e093ea021a6f38ce97c0dcd
- SHA1 7635f9f41f9527fd849d0a443af5648f3ca823b1
- SHA512 53a885fcbcd5ace5e3baef8a96f8b6ca95727d436ff2e8a811414e8896820c00cc88090984e3d291991855aa01b9f39fb96f396ec2d806e31cd035eb5eb77194
- SSDEEP 49152:NxqyBuLlYvu2+q0py5qoEFTSmVLIgj7OG/XhUbWsJ/2:NhE2Bo3iQhUb
- TLSH T1FA263A177E9148F9C0AAE335C8BB5255B620B84C8B3133D32E91AEB82F727D15E75B44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_cc91844b5e093ea021a6f38ce97c0dcd_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_cc91844b5e093ea021a6f38ce97c0dcd_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://shkpiva.shop:5627/tokens
-
http://beljaro.shop:2536/profiles
-
http://tokjoza.shop:5200/settings
Targets
-
- Target 2026-08-12_cc91844b5e093ea021a6f38ce97c0dcd_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.6MB
- SHA256 824570f6c57659b61ba7f8dad31d7cd37d61d58b417bda953a5eaa0b064df328
- MD5 cc91844b5e093ea021a6f38ce97c0dcd
- SHA1 7635f9f41f9527fd849d0a443af5648f3ca823b1
- SHA512 53a885fcbcd5ace5e3baef8a96f8b6ca95727d436ff2e8a811414e8896820c00cc88090984e3d291991855aa01b9f39fb96f396ec2d806e31cd035eb5eb77194
- SSDEEP 49152:NxqyBuLlYvu2+q0py5qoEFTSmVLIgj7OG/XhUbWsJ/2:NhE2Bo3iQhUb
- TLSH T1FA263A177E9148F9C0AAE335C8BB5255B620B84C8B3133D32E91AEB82F727D15E75B44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer