General
- Target servicemodelreg_unmapped.zip
- Size 305KB
- Sample260805-q8aayatsb1
- SHA256 7f0c4c1023ae7df1d0f7b389283f694fa9463f8b114957fa5f9359dcf858aeb2
- MD5 69c0d7ca844ec6ad412bb206b51ead37
- SHA1 44388be0eca7364df78a8d1009ec0777903ef4ab
- SHA512 e4f99dbfc2c53989d45acd34b80da40c89a14d6633e28a6d0c088783beb7b96583c2361926a07d84e994925ea7f2dd6490f357f1de34170baf4576717c96425d
- SSDEEP 6144:TX2rTsoLkZ3+1X2rTsoLkZ3+er6kcPg9q46ZTFA6a/V:CNLENLSr6kco9qJZTa6eV
- TLSH T159642303811EABB6FC6277DC5B877A3565AA3E45C8060E9D2E5148C0FDF4EEE287518C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
servicemodelreg_unmapped/servicemodelreg_unmapped.exe
Resource
win10v2004-20260513-en
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
servicemodelreg_unmapped/servicemodelreg_unmapped.exe
Resource
win11ltsc2024-20260709-en
0 signatures
300 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://onesdto.shop:2535
-
http://azurhay.shop:8539
-
http://slyfogx.shop:5776
Targets
-
- Target servicemodelreg_unmapped/servicemodelreg_unmapped.exe
- Size 222KB
- SHA256 87df292c7685e2f4a4ac6017fe0e3d8f4177c2b0f3657f0518645b96eb35d263
- MD5 cbacbb07a6bf95136857c9d93e06cae8
- SHA1 fd46cfe9af44cfdf5b8ae25b6f6ed208ea804941
- SHA512 bc3352869d6d40bd3047e55041f7a4d57689e63dbe3e3dfe2cebc7e299f6b81c75b1713c947bc8ee1649541f083a29b34d44a45a04f98be386563501b2de8568
- SSDEEP 3072:8sLRi2BW051IDQQctcCm76F/cCV+bdS2DN20O9bj1hu4yJyFJyVyccnL:8uRyU5tcCr0CV+bd3NIv1yVOnL
- TLSH T198245C7BD25371FCD553C07892663222B732BA6947209EF74392C3359E21AC06F7A978
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10