General
- Target 2026-08-12_b5a1d2583b06c6f735e0470f8dcd69d6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver
- Size 6.2MB
- Sample260812-1yllbser5x
- SHA256 9b4b2dab3b9591d7202085419b7e8e68edb5b528e30674ee580474501dff9fe5
- MD5 b5a1d2583b06c6f735e0470f8dcd69d6
- SHA1 5e87e131ae7b897577dae8df7ae7802f8a531f03
- SHA512 3fce9df01bfab2dcb2c3497cb97456ad0d217e3e1081217ce0dfd0b81e793a26e8babf52852b2785e0a9ab200b60e844a8503ce3b09175379ae4e06638bcbc45
- SSDEEP 98304:y7MjO8jV7spS/JkuXH9zhe3AHxtfnr0mXd6E9:y6V7sM/JkuSmV9
- TLSH T173665A17EC5148E5C199A231C8B79252BB70BC885B3227D32FA0BB782F727D1AE75744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_b5a1d2583b06c6f735e0470f8dcd69d6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_b5a1d2583b06c6f735e0470f8dcd69d6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-st.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://tokjoza.shop:5200/products
-
http://beljaro.shop:2536/addresses
-
http://shkpiva.shop:5627/documents
Targets
-
- Target 2026-08-12_b5a1d2583b06c6f735e0470f8dcd69d6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver
- Size 6.2MB
- SHA256 9b4b2dab3b9591d7202085419b7e8e68edb5b528e30674ee580474501dff9fe5
- MD5 b5a1d2583b06c6f735e0470f8dcd69d6
- SHA1 5e87e131ae7b897577dae8df7ae7802f8a531f03
- SHA512 3fce9df01bfab2dcb2c3497cb97456ad0d217e3e1081217ce0dfd0b81e793a26e8babf52852b2785e0a9ab200b60e844a8503ce3b09175379ae4e06638bcbc45
- SSDEEP 98304:y7MjO8jV7spS/JkuXH9zhe3AHxtfnr0mXd6E9:y6V7sM/JkuSmV9
- TLSH T173665A17EC5148E5C199A231C8B79252BB70BC885B3227D32FA0BB782F727D1AE75744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer