General

  • Target
    te encontrare hunting adeline h d carlton ....7z
  • Size 17.2MB
  • Sample260622-ebw8nagy5l
  • SHA256 c4a69b27bf6dbb2795419e510d17284755050e92d61129db1fb764bcd8453fc9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • remus_stealer

C2
  • http://carogra.biz:4219

  • http://myrtler.biz:9549

  • http://youngel.biz:8768

Targets

    • Target
      te encontrare hunting adeline h d carlton ....7z
    • Size 17.2MB
    • SHA256 c4a69b27bf6dbb2795419e510d17284755050e92d61129db1fb764bcd8453fc9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Remus stealer

    • Family: Remus

      Remus is a stealer written in C++.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v16

Tasks