General
- Target 2026-08-01_f799e1b8284c4faefc618a9c7b1011a1_akira
- Size 1.5MB
- Sample260801-stvpfacf49
- SHA256 15eaa3afeff636293a9043651ea65dcb75ef42a3948352e5c078e42235ab56f4
- MD5 f799e1b8284c4faefc618a9c7b1011a1
- SHA1 0fe50366e415e3c7cbb9535e5eecabc5b2b31f86
- SHA512 499dac91bce37226267f325449419968d96ea1ad4fe46677334fd074919d8cb2956a859e78d03b2db662f30865bbc3157dcd88878df1a47d8231dae77b62a125
- SSDEEP 49152:m+G8SX7vR2e0aJ0B0Is8XoQdeaaVnDFlT:08SV1h6PoQQDFlT
- TLSH T1FC759E52B2404F6CD6A282798297823AB97936492332DF770599BD31BFBBEC54F0570C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_f799e1b8284c4faefc618a9c7b1011a1_akira.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_f799e1b8284c4faefc618a9c7b1011a1_akira.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://odoriu.shop:4909
-
http://comples.biz:8768
-
http://firewai.biz:48261
Targets
-
- Target 2026-08-01_f799e1b8284c4faefc618a9c7b1011a1_akira
- Size 1.5MB
- SHA256 15eaa3afeff636293a9043651ea65dcb75ef42a3948352e5c078e42235ab56f4
- MD5 f799e1b8284c4faefc618a9c7b1011a1
- SHA1 0fe50366e415e3c7cbb9535e5eecabc5b2b31f86
- SHA512 499dac91bce37226267f325449419968d96ea1ad4fe46677334fd074919d8cb2956a859e78d03b2db662f30865bbc3157dcd88878df1a47d8231dae77b62a125
- SSDEEP 49152:m+G8SX7vR2e0aJ0B0Is8XoQdeaaVnDFlT:08SV1h6PoQQDFlT
- TLSH T1FC759E52B2404F6CD6A282798297823AB97936492332DF770599BD31BFBBEC54F0570C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Adds Run key to start application