General
- Target QuickFetch.exe
- Size 3.8MB
- Sample260809-ktj9psck5z
- SHA256 661cd950e95e26d00a28099a554f12e6f937774cd14f129777267d95762e4071
- MD5 2a0ddf18387aa475b5fa397df83bf14a
- SHA1 7990ddd6a937a9d8869ac8d5be60fb06502c5c24
- SHA512 03f41b33a6054afb64fdf2555ac7c852978b0c9e438bbd2f40f8f51e0a3d26dca69d7c2fd7cf53355073a36d3ace3f4abf5e5565c3905a0ba7568952cfaadc1d
- SSDEEP 49152:SdFv7Rx7CB+7yO0i4bvj1F+g5+DvLR7UCvMx58n1TX:S7Vx0i4H5gUCvM8z
- TLSH T1E5064A037E9448F5C0A9E731887B5652B674BC498B3133DB2EA0AEB82F763D05D79B44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
QuickFetch.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
QuickFetch.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://onesdto.shop:2535
-
http://slyfogx.shop:5776
-
http://azurhay.shop:8539
Targets
-
- Target QuickFetch.exe
- Size 3.8MB
- SHA256 661cd950e95e26d00a28099a554f12e6f937774cd14f129777267d95762e4071
- MD5 2a0ddf18387aa475b5fa397df83bf14a
- SHA1 7990ddd6a937a9d8869ac8d5be60fb06502c5c24
- SHA512 03f41b33a6054afb64fdf2555ac7c852978b0c9e438bbd2f40f8f51e0a3d26dca69d7c2fd7cf53355073a36d3ace3f4abf5e5565c3905a0ba7568952cfaadc1d
- SSDEEP 49152:SdFv7Rx7CB+7yO0i4bvj1F+g5+DvLR7UCvMx58n1TX:S7Vx0i4H5gUCvM8z
- TLSH T1E5064A037E9448F5C0A9E731887B5652B674BC498B3133DB2EA0AEB82F763D05D79B44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer