General
- Target 2026-10-19_6d5fe125e036b294cdd502b77706c741_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- Sample261020-vptyfsce27
- SHA256 b499877a070c87421ec5154e1f2fd9c49e8db751944326bceeee3807d26348cf
- MD5 6d5fe125e036b294cdd502b77706c741
- SHA1 6d3466fc3594b6a1bcbe6f3ac9cf34dcadc9d0a8
- SHA512 b540c1d7c90958ce0cdac1e54414eef1cd40350e0b7b03ccd720293600a3c1a65ec4aab926d9df693a7da364671fc070a6e2775aa86faa067e81c3985cba976f
- SSDEEP 24576:gLWOoy2OcxhLNWZvE2c/11Di2hYXZNrCKNMPZoBele5I9DUivuKJ2f8wt:gqLO6hsZvU/1Y4YjhqCXt
- TLSH T186C56A07BCE109EAC0AAA33189B365527B75BC085B3237D72E80B7782E727D19D35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-19_6d5fe125e036b294cdd502b77706c741_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-19_6d5fe125e036b294cdd502b77706c741_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
-
http://tzpx.courses:4437
Targets
-
- Target 2026-10-19_6d5fe125e036b294cdd502b77706c741_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
- Size 2.5MB
- SHA256 b499877a070c87421ec5154e1f2fd9c49e8db751944326bceeee3807d26348cf
- MD5 6d5fe125e036b294cdd502b77706c741
- SHA1 6d3466fc3594b6a1bcbe6f3ac9cf34dcadc9d0a8
- SHA512 b540c1d7c90958ce0cdac1e54414eef1cd40350e0b7b03ccd720293600a3c1a65ec4aab926d9df693a7da364671fc070a6e2775aa86faa067e81c3985cba976f
- SSDEEP 24576:gLWOoy2OcxhLNWZvE2c/11Di2hYXZNrCKNMPZoBele5I9DUivuKJ2f8wt:gqLO6hsZvU/1Y4YjhqCXt
- TLSH T186C56A07BCE109EAC0AAA33189B365527B75BC085B3237D72E80B7782E727D19D35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer