Extracted

• • Target
    rеlеаsе-v.3.778 (3).zip
  • Size 2.2MB
  • SHA256 3317789ac98f31b131e331731b48be79273071a5c539dc79495328d32e2c93a9
  • MD5 8cfdcaa5f78051b9cc3a4204c315e357
  • SHA1 a7bc915a2c757b9425e9bec071c6528eb6eaea49
  • SHA512 c62405186b2fc253b7ced7ce217e615d66947610fc4124cc6e414ed7161f64bc895a7a4da9319d7c136b391f55c978f35611cf1c5d128acd690c1482449499b2
  • SSDEEP 49152:E/e2EaZOXlRbbB/DbEgdTBeY7htJDtYbTTx0U4NVIEn4KiJaR:EG9aQXvb53Zh7rxtoTTX4NVdneaR
  • TLSH
    T16FB533C14F758236E3EB6973590B8E3F6B7EBC7A15E235138C6897992DC479E01B4202
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral1behavioral2
• • Target
    Нdstrр/rеlеаsе-v.3.778.exe
  • Size 2.5MB
  • SHA256 9c5ae61892a6758aff1cb076156754f46ec30ea315839e0556da3da483521519
  • MD5 e55c18482eae1870ef108bc7b7a2d0c0
  • SHA1 82e6ee36a8abda9192c1b735918c3dc2f21c19b5
  • SHA512 16bd182f28879a71c5325ae7a44e750f89e243bda1ac4c6070b285a8e9d2a12e93638a319bb2ee230a8b1b6c6504587c4c71b4f3ecf46464c9cea778b110ec43
  • SSDEEP 24576:v47j6u20wuu/5qkgQ+LNFMhFnS0eBGZKptmw9nyRyMf05UevA2Bele5IKDBdbDum:v47mB0NudyUhFnGENDf0aLCHwG
  • TLSH
    T1F2C55A07FCD109E9C4AEA23189B796927B35BC081B3623D72AA0B7782F727D06D75714
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  remus_stealerstealeradwarepersistenceransomwarespyware

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral3behavioral4