General
- Target recuva_professional__technician_(2026)_full_español_[mega].7z
- Size 3.7MB
- Sample260713-1d2f2saz91
- SHA256 ed38c22c7385998f5182bfae0a235faee616ed19fb34b945b1b8e211e3001e96
- MD5 2278019b15ee469c70ca3f5f48bcef20
- SHA1 14c5fda8f8477efebe248f1f563fa1aaa06c6fd1
- SHA512 bf073c7d1f4942a9fec344f0ca7724876c8b43d5e47765abf68748bd2227e703108958870e80fa408706d03cc45bc583c33d3cd7e650c7d62282c731234c42bd
- SSDEEP 98304:5guuNEmm51x/nc4PSbZ7i5It8WmbEkckqhdrVHfhYcmabsA1X0Du:5gJN2TZvGZ7MIWXAkckOdtJYbabsMX0S
- TLSH T1CA06332EF535E9F2C7D1EA61410F3F89096C241F288216D8F5863D50A8F67AD47B886F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
recuva_professional__technician_(2026)_full_español_[mega].exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
recuva_professional__technician_(2026)_full_español_[mega].exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://dikdiy.xyz:6504
-
http://columna.lol:6590
-
http://geminyw.xyz:5003
Targets
-
- Target recuva_professional__technician_(2026)_full_español_[mega].exe
- Size 757.1MB
- SHA256 4b76d55aafc53575a30ac4aa3cdd67687c2e4c8d800ccb2f647276c1d0226086
- MD5 2282ea2db5af8e4ba2b7c2de2a77e7d6
- SHA1 f2111d4fee0294d11788d144cfb20c38d2c5579e
- SHA512 fdec56cb5e67623e15ebc8e22c46558d48ceaa6fa80c13519da29575758ed2bcc632dcb8072faa1af79486d27ba3b84bcc0388a09f591a93c3d2adaff37dd444
- SSDEEP 98304:LfjRB6QedAn/4gTn2HJgQ/fyiRmCaR5cAtLH3lesz:LfJoflpgQ/9MrrLH3gG
- TLSH T13D89BE027AE401A5E4BB673088B79642BB36BC550F3193DF1694A27D2F73BC09E35726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer