General
- Target anatomia człowieka skawina pdf.7z
- Size 16.6MB
- Sample260809-qat8fsyaja
- SHA256 64d00a8fe7cd9104ab87d401dc647899f7169c86db95a443128657c4cfb88007
- MD5 d4d7d88466748678d9496f0bca759d08
- SHA1 0b69ee78c6b7c6cc2d9789478445185fbf15687b
- SHA512 deffb261b63aa97409f169105ae5cef7540729a51dd49f850f745b0c8883373998d2b36e678c1798fe06718fed595fd996ba108406d0b683614cd22a94d640d1
- SSDEEP 393216:kbZZm7AxMN5D715BVXoLqjSiMrh6YeFvh9uwJC9uyNMo:GZm7mWnneFiqh6H5hzJ8zn
- TLSH T1070733CB1A3A4E483DE87E9B1B9A5967C7B48D3B524C5ED883F8260D53660D4B70036F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
anatomia człowieka skawina pdf.7z
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
anatomia człowieka skawina pdf.7z
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
anatomia człowieka skawina pdf.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
anatomia człowieka skawina pdf.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://slyfogx.shop:5776
-
http://azurhay.shop:8539
-
http://beljaro.shop:2536
Targets
-
- Target anatomia człowieka skawina pdf.7z
- Size 16.6MB
- SHA256 64d00a8fe7cd9104ab87d401dc647899f7169c86db95a443128657c4cfb88007
- MD5 d4d7d88466748678d9496f0bca759d08
- SHA1 0b69ee78c6b7c6cc2d9789478445185fbf15687b
- SHA512 deffb261b63aa97409f169105ae5cef7540729a51dd49f850f745b0c8883373998d2b36e678c1798fe06718fed595fd996ba108406d0b683614cd22a94d640d1
- SSDEEP 393216:kbZZm7AxMN5D715BVXoLqjSiMrh6YeFvh9uwJC9uyNMo:GZm7mWnneFiqh6H5hzJ8zn
- TLSH T1070733CB1A3A4E483DE87E9B1B9A5967C7B48D3B524C5ED883F8260D53660D4B70036F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer
-
Executes dropped EXE
-
- Target anatomia człowieka skawina pdf.exe
- Size 797.7MB
- SHA256 9435bd6bfd3e048fbacebe70424105094c03d4508075294a8de023fef3eca6b3
- MD5 df0c19800ed4afd623d0db6fd7497f62
- SHA1 0938f45a3496892168002489a47e311347d375da
- SHA512 fd8b37c64b97b750674da9f3da936dcafea05875135f7d3ca4ff84d513148dc907113c12aa128fdaceb134def5c37b0dfa7753bc68f17222fa113cdac24180f3
- SSDEEP 393216:dKn/V+WM1h7Wg0eAAp2Ddb9YKBX5cYjVpUjKQ7xm0yP:dKkji/8KBXG7uP
- TLSH T12E99BE12B7E80066F4BB973098B78A12EA76BC514B31D3DF1694A66D1E737C09F31722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer