General
- Target R6.exe
- Size 3.1MB
- Sample260808-v8ktws1grg
- SHA256 6f737981ac722be8ae1c05a295667d050abe1b45dd946e1dbf4c46467c517c5f
- MD5 1c7f15e714e9edc2e48375e882ac8151
- SHA1 82d525dc9849d53a68fec90ae0340247e97c8d71
- SHA512 3640d204b8bac65670c1d68296fc7da9815570d8efc61763d024d08f1e24e12cd98990a1a233f6644466c7eb7050e8e1cdb9fead1ac37cd7e92101c991faaf66
- SSDEEP 49152:jSWABYXozXjysuFQQ/qhOrDVf9PUk/P9pDu:j5cqLR39pu
- TLSH T1FAE56B07ADB448F9C0DAE739886B5226BB70B809473133D32E91BA792F767D09E35744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
R6.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
R6.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://onesdto.shop:2535
-
http://azurhay.shop:8539
-
http://slyfogx.shop:5776
Targets
-
- Target R6.exe
- Size 3.1MB
- SHA256 6f737981ac722be8ae1c05a295667d050abe1b45dd946e1dbf4c46467c517c5f
- MD5 1c7f15e714e9edc2e48375e882ac8151
- SHA1 82d525dc9849d53a68fec90ae0340247e97c8d71
- SHA512 3640d204b8bac65670c1d68296fc7da9815570d8efc61763d024d08f1e24e12cd98990a1a233f6644466c7eb7050e8e1cdb9fead1ac37cd7e92101c991faaf66
- SSDEEP 49152:jSWABYXozXjysuFQQ/qhOrDVf9PUk/P9pDu:j5cqLR39pu
- TLSH T1FAE56B07ADB448F9C0DAE739886B5226BB70B809473133D32E91BA792F767D09E35744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer