General
- Target te encontrare hunting adeline h d carlton ....7z
- Size 17.2MB
- Sample260622-ebw8nagy5l
- SHA256 c4a69b27bf6dbb2795419e510d17284755050e92d61129db1fb764bcd8453fc9
- MD5 a946c1163471154c5a7e56c6e2faa4af
- SHA1 4ffe801e5063faf81c15279239e50efa65d1805e
- SHA512 069d7cb362c376942dda78f04be946d3a821df9456ce0bf778786ea54bd6a2b66009c82b0fdebcaa282d7d7a40a3991a4f24a841305a164fbbf9a79e17c62fb6
- SSDEEP 393216:tU15S3R+SQyjA1yNX6K9CvF/rpVoSp9epmEBjQeIvAAR6qyzqFRXCxCEHe9:cShpNKgCZr0Sp9ept2BRBGC0D2
- TLSH T1C4073318B63149D847EA6981C158A43CB4826DBF7549CF7A7EEF048C3DE6B304BE9C91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
te encontrare hunting adeline h d carlton ....7z
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://carogra.biz:4219
-
http://myrtler.biz:9549
-
http://youngel.biz:8768
Targets
-
- Target te encontrare hunting adeline h d carlton ....7z
- Size 17.2MB
- SHA256 c4a69b27bf6dbb2795419e510d17284755050e92d61129db1fb764bcd8453fc9
- MD5 a946c1163471154c5a7e56c6e2faa4af
- SHA1 4ffe801e5063faf81c15279239e50efa65d1805e
- SHA512 069d7cb362c376942dda78f04be946d3a821df9456ce0bf778786ea54bd6a2b66009c82b0fdebcaa282d7d7a40a3991a4f24a841305a164fbbf9a79e17c62fb6
- SSDEEP 393216:tU15S3R+SQyjA1yNX6K9CvF/rpVoSp9epmEBjQeIvAAR6qyzqFRXCxCEHe9:cShpNKgCZr0Sp9ept2BRBGC0D2
- TLSH T1C4073318B63149D847EA6981C158A43CB4826DBF7549CF7A7EEF048C3DE6B304BE9C91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer
-
Executes dropped EXE
-
Accesses cryptocurrency files/wallets, possible credential harvesting