General
- Target f0fb6aa794861412977827099a4127f45d368885adf92b75904efb493a1eb5cb.bin
- Size 3.2MB
- Sample260707-vbabwsh19x
- SHA256 f0fb6aa794861412977827099a4127f45d368885adf92b75904efb493a1eb5cb
- MD5 2a8ce7e05836d21a6a31ca558ccd679f
- SHA1 936f5df6baefe57642eee138764dd2103d4d0849
- SHA512 75fb1e500decb8b6bd417054f9feb8adc34afa9f93486d66c586905a60f22caa804d42cd1bb84b4662e73c8e0aef6044c0e21b3c8605dbead0efdfbf1895c175
- SSDEEP 24576:kZAAy2RiEwBq35GXQuVtvz22WgvJb3fYSJ0AYQXntxJBele5r92mCNYUDc5Dxz:kZA1gi23MXQa5zjvJbfYEY2V3xz
- TLSH T14EF56C077CE049E9C4AD677189B262927B35BC480F3527D32E90BB783E36AD19C76784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f0fb6aa794861412977827099a4127f45d368885adf92b75904efb493a1eb5cb.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f0fb6aa794861412977827099a4127f45d368885adf92b75904efb493a1eb5cb.exe
Resource
win11ltsc2024-20260706-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://myrtler.biz:9549
-
http://carogra.biz:4219
-
http://youngel.biz:8768
Targets
-
- Target f0fb6aa794861412977827099a4127f45d368885adf92b75904efb493a1eb5cb.bin
- Size 3.2MB
- SHA256 f0fb6aa794861412977827099a4127f45d368885adf92b75904efb493a1eb5cb
- MD5 2a8ce7e05836d21a6a31ca558ccd679f
- SHA1 936f5df6baefe57642eee138764dd2103d4d0849
- SHA512 75fb1e500decb8b6bd417054f9feb8adc34afa9f93486d66c586905a60f22caa804d42cd1bb84b4662e73c8e0aef6044c0e21b3c8605dbead0efdfbf1895c175
- SSDEEP 24576:kZAAy2RiEwBq35GXQuVtvz22WgvJb3fYSJ0AYQXntxJBele5r92mCNYUDc5Dxz:kZA1gi23MXQa5zjvJbfYEY2V3xz
- TLSH T14EF56C077CE049E9C4AD677189B262927B35BC480F3527D32E90BB783E36AD19C76784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer