General
- Target Setup.exe
- Size 2.4MB
- Sample260701-ntn5facy4n
- SHA256 f8b3342addb666e359ef5852a4034e4ccb2612d0004d4a3ae620979955f34a2a
- MD5 944f7a8303225eb154dda8eaf754e7e7
- SHA1 adbb968603eedbf8d203fb4b30ceb38303945e1f
- SHA512 840e4e36f5c0900066650804c923306defafaf6e3c75d9fe53e23d9c14a7428bfc516788eebd024df4bbf4f6e84582026ebeac20203a0827307e0722a4e3296a
- SSDEEP 49152:LvgBcK6T7v1wT4R4mhr0IXHftXHTn6gCcNvQQd:Lcst1XxHT1
- TLSH T1BAB54A47BCA408EAC09AA33189B792967B75BC480F3223D72E50BB782F72BD05D75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260630-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://axoshealthcare.com:4959
-
http://carogra.biz:4219
-
http://myrtler.biz:9549
Targets
-
- Target Setup.exe
- Size 2.4MB
- SHA256 f8b3342addb666e359ef5852a4034e4ccb2612d0004d4a3ae620979955f34a2a
- MD5 944f7a8303225eb154dda8eaf754e7e7
- SHA1 adbb968603eedbf8d203fb4b30ceb38303945e1f
- SHA512 840e4e36f5c0900066650804c923306defafaf6e3c75d9fe53e23d9c14a7428bfc516788eebd024df4bbf4f6e84582026ebeac20203a0827307e0722a4e3296a
- SSDEEP 49152:LvgBcK6T7v1wT4R4mhr0IXHftXHTn6gCcNvQQd:Lcst1XxHT1
- TLSH T1BAB54A47BCA408EAC09AA33189B792967B75BC480F3223D72E50BB782F72BD05D75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer