General
- Target Remotium-Windows.exe
- Size 23.7MB
- Sample260705-g1jd7set5q
- SHA256 f76ade0a9ee122a3a1f1d50e398ed15bd3aa7a1c009075248250cd22298f9ff3
- MD5 5768d00f68f9a359f8603b7d26b49f0b
- SHA1 0c930935c8d4e8192c7119362ead24ec071b3a46
- SHA512 03fa0c5acf47ae3ed01e347fd1735ddd00401479990f6df9eb0417b1cfa18816cf97757fd9d04cf3da13d0577c8d598f9d4545235a78f02e3532ba9ab2210e93
- SSDEEP 393216:Ab9nR4x4OUWejbZ6bc7/z2khJvpNXMOBZsffIdCqdOy80Ma6Z6BxrkE:+9nR4xL0tvhJRRneff6wy80M7Z6Hk
- TLSH T152473326F28A1C79E41ACC7096454A32A6393CA557321EFB53C836A43F7BDD00B3B795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Remotium-Windows.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Remotium-Windows.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Remotium-Windows.exe
- Size 23.7MB
- SHA256 f76ade0a9ee122a3a1f1d50e398ed15bd3aa7a1c009075248250cd22298f9ff3
- MD5 5768d00f68f9a359f8603b7d26b49f0b
- SHA1 0c930935c8d4e8192c7119362ead24ec071b3a46
- SHA512 03fa0c5acf47ae3ed01e347fd1735ddd00401479990f6df9eb0417b1cfa18816cf97757fd9d04cf3da13d0577c8d598f9d4545235a78f02e3532ba9ab2210e93
- SSDEEP 393216:Ab9nR4x4OUWejbZ6bc7/z2khJvpNXMOBZsffIdCqdOy80Ma6Z6BxrkE:+9nR4xL0tvhJRRneff6wy80M7Z6Hk
- TLSH T152473326F28A1C79E41ACC7096454A32A6393CA557321EFB53C836A43F7BDD00B3B795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL