General
- Target appFile.exe
- Size 831.9MB
- Sample260809-23rtkser4s
- SHA256 34a9116bf497fea382f1ac2fb41cbdc14f6a6f3bc70d2fbb04afd4a2abe54017
- MD5 97f991b0f463d0dcc7c229ea887f2cbf
- SHA1 076c3f69e7ceab0894558224c410325839a9c1fe
- SHA512 35b6209688bbe4fda8c394630f0d5c9d70a74cd16970d079332f143ff7c3d4fb103b0ff3d7edf33224385ff507dbacfb7364eb01d2ebbc9ad637a44cbf505da1
- SSDEEP 393216:cWFU9moRaHQ4Nsn2uYy2g7JKTqhluBx71S5Nxub8kK/rVhpe2A+2SZfiHn1E5doZ:cWFToRaHQis2tqhluGrubou6RiJreS
- TLSH T1E499BF02B7F80065F1B7973489B79A12EA36BC611B31D3DF1290A66D1E737C09E35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
appFile.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
appFile.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://onesdto.shop:2535
-
http://azurhay.shop:8539
-
http://slyfogx.shop:5776
Targets
-
- Target appFile.exe
- Size 831.9MB
- SHA256 34a9116bf497fea382f1ac2fb41cbdc14f6a6f3bc70d2fbb04afd4a2abe54017
- MD5 97f991b0f463d0dcc7c229ea887f2cbf
- SHA1 076c3f69e7ceab0894558224c410325839a9c1fe
- SHA512 35b6209688bbe4fda8c394630f0d5c9d70a74cd16970d079332f143ff7c3d4fb103b0ff3d7edf33224385ff507dbacfb7364eb01d2ebbc9ad637a44cbf505da1
- SSDEEP 393216:cWFU9moRaHQ4Nsn2uYy2g7JKTqhluBx71S5Nxub8kK/rVhpe2A+2SZfiHn1E5doZ:cWFToRaHQis2tqhluGrubou6RiJreS
- TLSH T1E499BF02B7F80065F1B7973489B79A12EA36BC611B31D3DF1290A66D1E737C09E35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer