General

  • Target

    remus.exe

  • Size

    2.2MB

  • MD5

    48a8b5d071e4f1f18704224f2c3aa071

  • SHA1

    cb7d9a548ca9db973f706d4e9e0ec42de2a2c481

  • SHA256

    eb65b774c837d4f51abeb54caeff7e4a7d1a73da001c568b4be54d721d138747

  • SHA512

    cb49da7a36ac7c1c1204c95b5fdc9e5a53aa8a872c2cbe325d3d4b4744b4596591497f9137cd25b5902238d5722dd11c149705ad3e66695bcc7e9b315ef97161

  • SSDEEP

    24576:OOfsfKozBKHAhRh3KzPSA7R7Bt28SVSVlzyQOQZ9IEb68vL4R+2pYJeCYMXABtQ:PBozBdhEV7q8bOQnIFWY+3Je0wo

Score
10/10

Malware Config

Extracted

Family

invictastealer

C2

https://discord.com/api/webhooks/1141430457611858000/v6Vgy_soxdREr5MKKOH9RS1L1TK2Rp9J_UBK7nM2wzDswvqFw8RKs9N9h_6Yt1AeSnB8

Signatures

  • Invictastealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • remus.exe
    .exe windows x64

    2d5aa2bacb12ffd10966c83ca6563356


    Headers

    Imports

    Sections