General
- Target hilton.exe
- Size 1.2MB
- Sample260811-pry3astard
- SHA256 4fe508025770c53e0717b524175f079ee23443a4ed909a36be04ee7522e7e055
- MD5 57ded3f726f41e685873dce701edbce2
- SHA1 a68b2c91c66a1b74e5e66695f3ab18f812dca893
- SHA512 28a303f6ea3ae32b9e3e6a18685fe8a1ddc55f428b091d5b60762bb06771a281754ff258a8d2b3d6dfa2f71e9131a3442f4101851c017a689f8168096d4e5c64
- SSDEEP 24576:cBhUSx4QP3ZFb72XPwIA1gqf/F+fgXad8y5SquiVZaSIjP6q/oj9:cBhza4ZFb7anA1gyggXe8yAcaNmd
- TLSH T1B5452301C2D48036EC7D977048F74EDB4135BD12A9B5576A72C4B8963CA3A49EA3273F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hilton.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://cofasl.shop:6590
-
http://myrtler.biz:9549
-
http://youngel.biz:8768
Targets
-
- Target hilton.exe
- Size 1.2MB
- SHA256 4fe508025770c53e0717b524175f079ee23443a4ed909a36be04ee7522e7e055
- MD5 57ded3f726f41e685873dce701edbce2
- SHA1 a68b2c91c66a1b74e5e66695f3ab18f812dca893
- SHA512 28a303f6ea3ae32b9e3e6a18685fe8a1ddc55f428b091d5b60762bb06771a281754ff258a8d2b3d6dfa2f71e9131a3442f4101851c017a689f8168096d4e5c64
- SSDEEP 24576:cBhUSx4QP3ZFb72XPwIA1gqf/F+fgXad8y5SquiVZaSIjP6q/oj9:cBhza4ZFb7anA1gyggXe8yAcaNmd
- TLSH T1B5452301C2D48036EC7D977048F74EDB4135BD12A9B5576A72C4B8963CA3A49EA3273F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE