Extracted

• • Target

    remusfud.exe

  • Size

    2.2MB

  • MD5

    e1d385ddfe0d8760f1101dfa5f773c3e

  • SHA1

    bd3b054adc776d188459b5527980e024b0870352

  • SHA256

    60df63568869dac2a7c0ce96354cf2b0757d01d5e7d6a926b35e713bde991dfb

  • SHA512

    3014fb7072d55dcb8ca44a1cea818b2e1432c7b496ff08e43f6e6c121a4d4ba340e1e5695837d58ca7678913ffe15559fe3c2802894614451121168ecc61d9ff

  • SSDEEP

    24576:OOfsfKozBKHAhRh3KzPSA7R7Bt28SVSVlzyQOQZ9IEb68vL4R+2pYJeCYMXABtI:PBozBdhEV7q8bOQnIFWY+3Je0wQ

  Score

  7^/10

  spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2