Analysis
- max time kernel
150s - max time network
137s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/08/2026, 03:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_f3ea230661a78bba91dccbcc9f84c93a_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_f3ea230661a78bba91dccbcc9f84c93a_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-21_f3ea230661a78bba91dccbcc9f84c93a_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe
- Size 5.8MB
- Sample260821-eamylafr4v
- SHA256 1b7877df6d2fd9dc5966225b6e8efc6901b170112074fcd4578892373b11fb48
- MD5 f3ea230661a78bba91dccbcc9f84c93a
- SHA1 3f5a249670d9798614006e609c6d18cf0dd5df4e
- SHA512 4415950840d936bf664eee8120d942b470cde118b1a3868b9bf2af0930665521ae413db66a9be6d73478093ece18c013fc831779eb7d078ff82c233f48d0930c
- SSDEEP 49152:GE7k0/ktJP9pprb/T5vO90d7HjmAFd4A64nsfJ5seCkIWelUK6vjrTWqm0C3LZgU:YtJP9paZpNE0DfMN
- TLSH T1FA564917FD6510A1C5EAE630C4764212BA30B8894B3473E72F91BAB82F777D06EB9744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://poagint.click:8592/tags
-
http://vexdico.shop:8539/workspaces
-
http://kupzovo.shop:7567/addresses
Signatures
- Family: Remus
Remus is a stealer written in C++.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_f3ea230661a78bba91dccbcc9f84c93a_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-21_f3ea230661a78bba91dccbcc9f84c93a_cobalt-strike_frostygoop_glassworm_hive_luca-stealer_salatstealer_sliver.exe"1⤵PID:3536