General
- Target kJHGFDs.exe
- Size 222KB
- Sample260808-v71hysar7z
- SHA256 76447f7abf34199b8f1bf486bc77b0ee171afa0d1ec927d69e5e454595d05867
- MD5 3ff89e9dbf1a9c5a3b4f4c53e8d651f9
- SHA1 b1de27fa6a6eaa09989632e7aaca5ee6cda74037
- SHA512 538698c09334edfaea570bdd52ffb1c831c8f20c48c6ce18247633623399c72892cf6146f412b30b266dbc986a803712d1598e45c4b6f2c052d581936efaba27
- SSDEEP 3072:8sLRi2BW051IDQQctcCm76F/cCV+bdS2DN20O9bj1hu4yJyFJyVonYnL:8uRyU5tcCr0CV+bd3NIv1yVNnL
- TLSH T189245C7BD25371FCD553C03892663222B732BA6947249EF74392C3359E21AC06F7A978
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
kJHGFDs.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
kJHGFDs.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://onesdto.shop:2535
-
http://azurhay.shop:8539
-
http://slyfogx.shop:5776
Targets
-
- Target kJHGFDs.exe
- Size 222KB
- SHA256 76447f7abf34199b8f1bf486bc77b0ee171afa0d1ec927d69e5e454595d05867
- MD5 3ff89e9dbf1a9c5a3b4f4c53e8d651f9
- SHA1 b1de27fa6a6eaa09989632e7aaca5ee6cda74037
- SHA512 538698c09334edfaea570bdd52ffb1c831c8f20c48c6ce18247633623399c72892cf6146f412b30b266dbc986a803712d1598e45c4b6f2c052d581936efaba27
- SSDEEP 3072:8sLRi2BW051IDQQctcCm76F/cCV+bdS2DN20O9bj1hu4yJyFJyVonYnL:8uRyU5tcCr0CV+bd3NIv1yVNnL
- TLSH T189245C7BD25371FCD553C03892663222B732BA6947249EF74392C3359E21AC06F7A978
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10