General
- Target mixres3.exe
- Size 3.5MB
- Sample260808-vgfqvs1ckh
- SHA256 99830a24d6aed654adff341b2c6ad2ba6c971c028dfce1ca455a37d1fbdf4617
- MD5 93617a98e627a01092973d8f2d1829ff
- SHA1 dc9a3e8c88c518b5984c99af2e0e9051b0242f87
- SHA512 2f98e80f3589ce4ab4d0022c189eab7ff4614e648945d24663749863a1b14b400e90eb1e5b81ca07b6d12070aa7130b2cb0a07b40c6c4757423c8d752c1b2e08
- SSDEEP 49152:ASkqOMTm9w9QXzjK0m/pHLi6od1p0gEP0qc:ApbT8pH4r2XPI
- TLSH T1BBF52813BC9548F5D0A5A332C9B74256BA64BC0C5B3133D72EA0AEB82F727D06E35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mixres3.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
mixres3.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://topxgax.click:4930
-
http://onesdto.shop:2535
-
http://azurhay.shop:8539
Targets
-
- Target mixres3.exe
- Size 3.5MB
- SHA256 99830a24d6aed654adff341b2c6ad2ba6c971c028dfce1ca455a37d1fbdf4617
- MD5 93617a98e627a01092973d8f2d1829ff
- SHA1 dc9a3e8c88c518b5984c99af2e0e9051b0242f87
- SHA512 2f98e80f3589ce4ab4d0022c189eab7ff4614e648945d24663749863a1b14b400e90eb1e5b81ca07b6d12070aa7130b2cb0a07b40c6c4757423c8d752c1b2e08
- SSDEEP 49152:ASkqOMTm9w9QXzjK0m/pHLi6od1p0gEP0qc:ApbT8pH4r2XPI
- TLSH T1BBF52813BC9548F5D0A5A332C9B74256BA64BC0C5B3133D72EA0AEB82F727D06E35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer