General
- Target sunwukongs.exe
- Size 640KB
- Sample260720-qj3aesdw7v
- SHA256 5a509d88669f780465bc59ad9bd092fc3ab4538b6b2653ad02173f1197c23fd1
- MD5 71433eadba3f3f3d258e75d98841fa39
- SHA1 4deb46f25d9e030e273fc8ffb8ec8d092484126b
- SHA512 2fe3a6109852c0eba5edb8416ccf238f94e2545e30108ee742d0defb5fd35c1410767dbe79409b653c229be88649d1978427423e1072bb4916bf0a12a71ad246
- SSDEEP 12288:WCTBHSrOi6Ni967TN47hxLqfSFutqvKmFiHDgoZKAzy:WCuL6NisTC7hxLButqvDF
- TLSH T15FD40F9B6A61F0E8E8616BFC94986E0D47607CD5FD9B839E1382BF1B8D34D438E18174
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sunwukongs.exe
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
sunwukongs.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
sunwukongs.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
Botnet
-
6f4e0aa8d0902b6c25f6d73df5a2ff6e
C2
-
http://prodxk.lol:5674
-
http://baxe.pics:48261
-
http://morkaj.bet:8768
Targets
-
- Target sunwukongs.exe
- Size 640KB
- SHA256 5a509d88669f780465bc59ad9bd092fc3ab4538b6b2653ad02173f1197c23fd1
- MD5 71433eadba3f3f3d258e75d98841fa39
- SHA1 4deb46f25d9e030e273fc8ffb8ec8d092484126b
- SHA512 2fe3a6109852c0eba5edb8416ccf238f94e2545e30108ee742d0defb5fd35c1410767dbe79409b653c229be88649d1978427423e1072bb4916bf0a12a71ad246
- SSDEEP 12288:WCTBHSrOi6Ni967TN47hxLqfSFutqvKmFiHDgoZKAzy:WCuL6NisTC7hxLButqvDF
- TLSH T15FD40F9B6A61F0E8E8616BFC94986E0D47607CD5FD9B839E1382BF1B8D34D438E18174
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Remus stealer