General
- Target xqAAE.exe
- Size 218KB
- Sample260808-v8nwjsef94
- SHA256 f6816999eaa874202286984abfab55e4f586a5e895328b542f5500d279ad7a58
- MD5 6205c7149e390e846e0099c23036c02a
- SHA1 ad63aa6b33f4ca38456ab5190267bd727fc32c66
- SHA512 08fdfe3b7b01570866e32ac596cc0bd8c65fed6044c61e8859a9f361b0cf269e6e7bd186b1fa64d8d5b5f122b377490e2d1838162600e738a7cd69b4a99d089b
- SSDEEP 3072:kHSo4cHafRi2+BJIrLtNrxBMhDunBq8Qjd3D/UXhvYEsj9UzzqjFfzE98:kHKR+BJ3uBtQj5Ayz9FFfzE
- TLSH T10E243A6BD25371FCD552C07853667222B732BA384724AEFB0393C3359D22EC46E78965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
xqAAE.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
xqAAE.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://onesdto.shop:2535
-
http://azurhay.shop:8539
-
http://slyfogx.shop:5776
Targets
-
- Target xqAAE.exe
- Size 218KB
- SHA256 f6816999eaa874202286984abfab55e4f586a5e895328b542f5500d279ad7a58
- MD5 6205c7149e390e846e0099c23036c02a
- SHA1 ad63aa6b33f4ca38456ab5190267bd727fc32c66
- SHA512 08fdfe3b7b01570866e32ac596cc0bd8c65fed6044c61e8859a9f361b0cf269e6e7bd186b1fa64d8d5b5f122b377490e2d1838162600e738a7cd69b4a99d089b
- SSDEEP 3072:kHSo4cHafRi2+BJIrLtNrxBMhDunBq8Qjd3D/UXhvYEsj9UzzqjFfzE98:kHKR+BJ3uBtQj5Ayz9FFfzE
- TLSH T10E243A6BD25371FCD552C07853667222B732BA384724AEFB0393C3359D22EC46E78965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10