Analysis
- max time kernel
150s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/07/2026, 10:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hjbk.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
hjbk.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target hjbk.exe
- Size 2.4MB
- Sample260712-mfylaah14s
- SHA256 725700849bc04426ca22bdfcabfebde8612749058816e7cba8ceec442ee8848a
- MD5 06aeb8f255622dfce863917ca2aa1c5c
- SHA1 b06061c312d4779a885b8d1478e93ad48cfb861f
- SHA512 e49b7d871bedfe2ac96b73a25eb8311f884ca0c74526f425789bf150807066708f0549175e06fbfdbad5cef438a4bb6d31be9bc92ba26e08d32306f88997b474
- SSDEEP 24576:45JQrBSLaTbmgduRNcDDqymkbaf4tjPoxKKmrdYvA2Bele5rK2y0HEhWxEe:45J6ByamgmqPqHkBjgQKmro8XU
- TLSH T181C54907BDA049E9C0AE923199B751967B75BC080F3223EB2E90B7782F72BD05D35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://dikdiy.xyz:6504
-
http://columna.lol:6590
-
http://geminyw.xyz:5003
Signatures
- Family: Remus
Remus is a stealer written in C++.
- Detects Remus stealer 2 IoCs
resource yara_rule behavioral2/memory/4512-0-0x0000000140000000-0x0000000140039000-memory.dmp family_remus_stealer behavioral2/memory/4512-1-0x0000000140000000-0x0000000140039000-memory.dmp family_remus_stealer