General

  • Target
    WW26A.exe
  • Size 4.4MB
  • Sample260517-bc51eaez7l
  • SHA256 29fbe379590d0d8117268c5ca8981e22da7551256ce22ff1e151867327409898
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • remus_stealer

Botnet
  • a1583d52c651b516d6bc583aa611a8c5

C2
  • http://ponzchq.shop:9504

  • http://firewai.biz:48261

  • http://mascard.biz:8768

Targets

    • Target
      WW26A.exe
    • Size 4.4MB
    • SHA256 29fbe379590d0d8117268c5ca8981e22da7551256ce22ff1e151867327409898
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Matrix

Tasks