General

  • Target

    remusfud.exe

  • Size

    2.2MB

  • MD5

    e1d385ddfe0d8760f1101dfa5f773c3e

  • SHA1

    bd3b054adc776d188459b5527980e024b0870352

  • SHA256

    60df63568869dac2a7c0ce96354cf2b0757d01d5e7d6a926b35e713bde991dfb

  • SHA512

    3014fb7072d55dcb8ca44a1cea818b2e1432c7b496ff08e43f6e6c121a4d4ba340e1e5695837d58ca7678913ffe15559fe3c2802894614451121168ecc61d9ff

  • SSDEEP

    24576:OOfsfKozBKHAhRh3KzPSA7R7Bt28SVSVlzyQOQZ9IEb68vL4R+2pYJeCYMXABtI:PBozBdhEV7q8bOQnIFWY+3Je0wQ

Score
10/10

Malware Config

Extracted

Family

invictastealer

C2

https://discord.com/api/webhooks/1141462693451149413/3meA_-0qEAcdMtR6rwJ5ZAXokVx7Ko6n5fNn6WZOUbDFhQyvCA-1rsUUOXpDfbOAbYbr

Signatures

  • Invictastealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • remusfud.exe
    .exe windows x64

    2d5aa2bacb12ffd10966c83ca6563356


    Headers

    Imports

    Sections