General
- Target KLHdfs.exe
- Size 218KB
- Sample260808-v8my9aef89
- SHA256 a7e6ece576a9c74f7e9d80545ea5faf1f7542ed7b557cb6be671edd7452c4d69
- MD5 2e45b7a0c5d4a29234bb77b9972aa069
- SHA1 490dede7cc84342d37d35c91f61fd9c30e4d22e6
- SHA512 8307679ab3c819225f3e0bb0b39dc229b05e3e9fc29e98d3984599918192478b1a4b6a0f77b82972f9020824c5c4586bccf3207df9c124c8f6064447e433f31b
- SSDEEP 3072:kHSo4cHafRi2+BJIrLtNrxBMhDunBq8Qjd3D/UXhvYEsj9Uz0qFHFfzE98:kHKR+BJ3uBtQj5Ayz90FfzE
- TLSH T10E243A6BD25371FCD652C07853663222B732BA384724AEFB0393C3359D22EC46E79965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
KLHdfs.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
KLHdfs.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://onesdto.shop:2535
-
http://azurhay.shop:8539
-
http://slyfogx.shop:5776
Targets
-
- Target KLHdfs.exe
- Size 218KB
- SHA256 a7e6ece576a9c74f7e9d80545ea5faf1f7542ed7b557cb6be671edd7452c4d69
- MD5 2e45b7a0c5d4a29234bb77b9972aa069
- SHA1 490dede7cc84342d37d35c91f61fd9c30e4d22e6
- SHA512 8307679ab3c819225f3e0bb0b39dc229b05e3e9fc29e98d3984599918192478b1a4b6a0f77b82972f9020824c5c4586bccf3207df9c124c8f6064447e433f31b
- SSDEEP 3072:kHSo4cHafRi2+BJIrLtNrxBMhDunBq8Qjd3D/UXhvYEsj9Uz0qFHFfzE98:kHKR+BJ3uBtQj5Ayz90FfzE
- TLSH T10E243A6BD25371FCD652C07853663222B732BA384724AEFB0393C3359D22EC46E79965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10