General
- Target 2026-10-07_ea0ad1ec8a70ea0c920bb367ed63b049_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.4MB
- Sample261008-cvsngazz3n
- SHA256 6732a4eb20d7365dd38a5a8d8cc891a889c7d82de41da17d3aa1f91526dc64a5
- MD5 ea0ad1ec8a70ea0c920bb367ed63b049
- SHA1 1bb01e20aee921ac6ef651b839abe15accb8861a
- SHA512 6b5c2b00ce8cc05ec3e40868e96ee4ec5b048dbc77119cfb32b9af1ef9152e5b85387a739cc589104eeed2cd402125499d3e23d14c3ab8bffa009e36f2c79409
- SSDEEP 49152:8p7/iN+hk/I1X4AD+j1TkMyk+MeztXA4auupKy2LcZvIomCJqw5xLZjZqr:8qw1XRQykczBA/u82LcZX3Jp7Fj6
- TLSH T1292649477D912569D866A738E57B03617BA0BC8CC73133E32D90A6702F247C1AEFAB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-07_ea0ad1ec8a70ea0c920bb367ed63b049_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-07_ea0ad1ec8a70ea0c920bb367ed63b049_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://neortal.click:8321/exports
-
http://cdire.shop:9048/customers
-
http://bestals.shop:8592/images
Targets
-
- Target 2026-10-07_ea0ad1ec8a70ea0c920bb367ed63b049_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
- Size 4.4MB
- SHA256 6732a4eb20d7365dd38a5a8d8cc891a889c7d82de41da17d3aa1f91526dc64a5
- MD5 ea0ad1ec8a70ea0c920bb367ed63b049
- SHA1 1bb01e20aee921ac6ef651b839abe15accb8861a
- SHA512 6b5c2b00ce8cc05ec3e40868e96ee4ec5b048dbc77119cfb32b9af1ef9152e5b85387a739cc589104eeed2cd402125499d3e23d14c3ab8bffa009e36f2c79409
- SSDEEP 49152:8p7/iN+hk/I1X4AD+j1TkMyk+MeztXA4auupKy2LcZvIomCJqw5xLZjZqr:8qw1XRQykczBA/u82LcZX3Jp7Fj6
- TLSH T1292649477D912569D866A738E57B03617BA0BC8CC73133E32D90A6702F247C1AEFAB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10