General
- Target c989886a34d0a3e24d64df24b3becb936b3eb914f3ae888d9e9389701348b010.zip
- Size 1.1MB
- Sample260813-sg9ylabm2w
- SHA256 f1e83fdd94fc8f413c702cfa5c751e3178a087a3b56a8b6e814d83adebea532a
- MD5 c41b9ccf499cf8e34f06fb1260a089df
- SHA1 4b4dc90bf7422d8cbbfe8cbb9de9db6868d3ebee
- SHA512 58f576273700f5456113a742d32775ae07389792676a08219e68e0c97469ba7b0638a9ef48e22f0bd1959465c3e26af9e33717207301ab72b7471325936b177e
- SSDEEP 24576:SHXMExR3YKx2QykWof+L5oTCPIVj3t5J0d35e2aNC1n3yuT:mvYhrk9+FoT0yx5p1PM
- TLSH T1B93533907B56DDF20A576F3CDE45C2811AFA1CA73017BC0A9FD2DFB5727D91A0042A92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c989886a34d0a3e24d64df24b3becb936b3eb914f3ae888d9e9389701348b010.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
c989886a34d0a3e24d64df24b3becb936b3eb914f3ae888d9e9389701348b010.zip
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
c989886a34d0a3e24d64df24b3becb936b3eb914f3ae888d9e9389701348b010.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
c989886a34d0a3e24d64df24b3becb936b3eb914f3ae888d9e9389701348b010.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://shkpiva.shop:5627/videos
-
http://mrlketo.shop:8932/teams
-
http://vexdico.shop:8539/folders
Targets
-
- Target c989886a34d0a3e24d64df24b3becb936b3eb914f3ae888d9e9389701348b010.zip
- Size 1.1MB
- SHA256 f1e83fdd94fc8f413c702cfa5c751e3178a087a3b56a8b6e814d83adebea532a
- MD5 c41b9ccf499cf8e34f06fb1260a089df
- SHA1 4b4dc90bf7422d8cbbfe8cbb9de9db6868d3ebee
- SHA512 58f576273700f5456113a742d32775ae07389792676a08219e68e0c97469ba7b0638a9ef48e22f0bd1959465c3e26af9e33717207301ab72b7471325936b177e
- SSDEEP 24576:SHXMExR3YKx2QykWof+L5oTCPIVj3t5J0d35e2aNC1n3yuT:mvYhrk9+FoT0yx5p1PM
- TLSH T1B93533907B56DDF20A576F3CDE45C2811AFA1CA73017BC0A9FD2DFB5727D91A0042A92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target c989886a34d0a3e24d64df24b3becb936b3eb914f3ae888d9e9389701348b010.exe
- Size 2.5MB
- SHA256 c989886a34d0a3e24d64df24b3becb936b3eb914f3ae888d9e9389701348b010
- MD5 1a44d112282385d7ffabea9062e1cef7
- SHA1 279d8d542c6b7fa133862bf1983d4a6a77f0a1af
- SHA512 598d31630023dcdb4c923908970bfe871949f8095a446f26caa2ea4c85d49cf1ad5b713c01c50e57b4efb307630871b09c70f8776b1871954dd75c75affceb9c
- SSDEEP 49152:xlO+Vbv+c/HnquVURnjC/wCA4zWzh8cHLbEGH5Nw:xoZAUt08HPw
- TLSH T10CC55A077CA044E9C09A573295B79A52BB75BC0C8B3633DB2ED0AA742F723D15D7AB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Remus stealer