General
- Target ef0c8c65f60f47b3ec347f4dec553c6a1781d3c8c51210507b5a291671e2184d.exe
- Size 2.5MB
- Sample260707-sjc2msfz4w
- SHA256 ef0c8c65f60f47b3ec347f4dec553c6a1781d3c8c51210507b5a291671e2184d
- MD5 8230cb2e8ed07067edc0a00dfd049a66
- SHA1 dec322b4500df33a4cd880cdfdd3e979bcb66a82
- SHA512 443bcab987c6e49e401205265b5da539578fd767b635f67bdd8ebd642f846ca625dcd73cc3ed34ecd673f76d1203b43545b2d4d79979ad42e3bf8620dd646d1e
- SSDEEP 24576:mWNSi4+WTQVpj2SlviqxjKDObAaOFD+kU2ULrbWfb1mGvA2Bele5IK2mlac9DcQe:mWNpBKQj2gvzxsirLXj8Rc
- TLSH T1C4C55A07FC9109EAC09AA33189B29296B735BC491F3227D72E90B7782F727D06D36754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ef0c8c65f60f47b3ec347f4dec553c6a1781d3c8c51210507b5a291671e2184d.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ef0c8c65f60f47b3ec347f4dec553c6a1781d3c8c51210507b5a291671e2184d.exe
Resource
win11ltsc2024-20260706-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://orderre.shop:4190
-
http://myrtler.biz:9549
-
http://carogra.biz:4219
Targets
-
- Target ef0c8c65f60f47b3ec347f4dec553c6a1781d3c8c51210507b5a291671e2184d.exe
- Size 2.5MB
- SHA256 ef0c8c65f60f47b3ec347f4dec553c6a1781d3c8c51210507b5a291671e2184d
- MD5 8230cb2e8ed07067edc0a00dfd049a66
- SHA1 dec322b4500df33a4cd880cdfdd3e979bcb66a82
- SHA512 443bcab987c6e49e401205265b5da539578fd767b635f67bdd8ebd642f846ca625dcd73cc3ed34ecd673f76d1203b43545b2d4d79979ad42e3bf8620dd646d1e
- SSDEEP 24576:mWNSi4+WTQVpj2SlviqxjKDObAaOFD+kU2ULrbWfb1mGvA2Bele5IK2mlac9DcQe:mWNpBKQj2gvzxsirLXj8Rc
- TLSH T1C4C55A07FC9109EAC09AA33189B29296B735BC491F3227D72E90B7782F727D06D36754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer