General
- Target 2026-08-28_82e417c355e28f833b82cf5230426a63_amadey_cobalt-strike_darkgate_frostygoop_glassworm_hijackloader_hive_icedid_luca-stealer_salatstealer_sliver_stealc_vidar
- Size 31.8MB
- Sample260828-qc8hvsak4y
- SHA256 bc2044dc6443102429d0aafce44381f24e62958aca1b9e0c4d91406c66afddfe
- MD5 82e417c355e28f833b82cf5230426a63
- SHA1 8d99e793853b996511679419f2d37c5d36940e41
- SHA512 01f95ca88080b7486fe2761349e8bb257f75089d5005348b1c9c42ec21a07492daddb5d0bb78b0c5e9eaa3c89f3ff538cb1f064f0292db76deba3c4509356c70
- SSDEEP 393216:uGLNdsa5hWov0qNRWY9y3MZG8KQRS7nY4odiF835gK+DDum:J5Wdov0cWY9y3MZG5QRS7Y9diF83SIm
- TLSH T12577BE02B7E80166E5BB973094B78612EA36FC515B31C3DF1294A26D2E737C0AF35726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_82e417c355e28f833b82cf5230426a63_amadey_cobalt-strike_darkgate_frostygoop_glassworm_hijac.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-28_82e417c355e28f833b82cf5230426a63_amadey_cobalt-strike_darkgate_frostygoop_glassworm_hijac.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://Cryptovectorhub3.lol:5478/customers
-
http://fresok.top:9048/posts
-
http://shhsift.click:7647/webhooks
Targets
-
- Target 2026-08-28_82e417c355e28f833b82cf5230426a63_amadey_cobalt-strike_darkgate_frostygoop_glassworm_hijackloader_hive_icedid_luca-stealer_salatstealer_sliver_stealc_vidar
- Size 31.8MB
- SHA256 bc2044dc6443102429d0aafce44381f24e62958aca1b9e0c4d91406c66afddfe
- MD5 82e417c355e28f833b82cf5230426a63
- SHA1 8d99e793853b996511679419f2d37c5d36940e41
- SHA512 01f95ca88080b7486fe2761349e8bb257f75089d5005348b1c9c42ec21a07492daddb5d0bb78b0c5e9eaa3c89f3ff538cb1f064f0292db76deba3c4509356c70
- SSDEEP 393216:uGLNdsa5hWov0qNRWY9y3MZG8KQRS7nY4odiF835gK+DDum:J5Wdov0cWY9y3MZG5QRS7Y9diF83SIm
- TLSH T12577BE02B7E80166E5BB973094B78612EA36FC515B31C3DF1294A26D2E737C0AF35726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10