General
- Target HStarteqX.exe
- Size 2.7MB
- Sample260628-qbqlnahv4s
- SHA256 bb9433e362bc054482b4dda309b67271b0de66bd4facb5370d2c48c3a2f69b17
- MD5 ce93846b8a4d42531f4e5950a817bcc1
- SHA1 e9e83354951260d9485f21cdaacf954034f1fe05
- SHA512 e8fb6d2fec326ab92b49f547e87e48167b68b6c11615783d5fee7c2c7c23f9b38577c0ec1f0012397f3019e9891ece582fdd33a18ce8d433da906d18af12d038
- SSDEEP 24576:V0ZkmuwOYLIaa08wocEo7YKivlEQE90azMLwMfslA2vA2Bele5rKDXQZEwXZSiay:V0KhwJLp8rcE6YKof9lPcYirC4
- TLSH T138D56B47BCA148F9C09AA33188B791567B35BC080B3227D72EA0BA783FB27C45D76755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HStarteqX.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
HStarteqX.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://lawofi.xyz:7538
-
http://myrtler.biz:9549
-
http://carogra.biz:4219
Targets
-
- Target HStarteqX.exe
- Size 2.7MB
- SHA256 bb9433e362bc054482b4dda309b67271b0de66bd4facb5370d2c48c3a2f69b17
- MD5 ce93846b8a4d42531f4e5950a817bcc1
- SHA1 e9e83354951260d9485f21cdaacf954034f1fe05
- SHA512 e8fb6d2fec326ab92b49f547e87e48167b68b6c11615783d5fee7c2c7c23f9b38577c0ec1f0012397f3019e9891ece582fdd33a18ce8d433da906d18af12d038
- SSDEEP 24576:V0ZkmuwOYLIaa08wocEo7YKivlEQE90azMLwMfslA2vA2Bele5rKDXQZEwXZSiay:V0KhwJLp8rcE6YKof9lPcYirC4
- TLSH T138D56B47BCA148F9C09AA33188B791567B35BC080B3227D72EA0BA783FB27C45D76755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer