General
- Target unpacked
- Size 224KB
- Sample260814-cfhjysswey
- SHA256 b249d3191e037187dfa849785c55daacf1b2d0c54e033276a61be51699c4962a
- MD5 145ef87f2525369617eaf83f0b7a83d0
- SHA1 bb029df476c91ed88b6293f95c91412581be4f8f
- SHA512 afa1b621ca2e171f6369f33dd108d02eaec25c243d608fdd898d42604c4202c48808359fdafc735a11a4260d858c4cce7e534573be8bbe2acc092116e1b05c47
- SSDEEP 3072:AzJBvuqmBCSql3lekVwd0XN2Cw+MW545BwjNSoJpMIGBTc+boSK:AzJBxNjVpPM+yyB/Peh
- TLSH T13E245B6BD21371FCE652C07892663222B772F93947349DF70392C3319E22AC46E7A975
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
unpacked.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
unpacked.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://primzes.biz:8528
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
Targets
-
- Target unpacked
- Size 224KB
- SHA256 b249d3191e037187dfa849785c55daacf1b2d0c54e033276a61be51699c4962a
- MD5 145ef87f2525369617eaf83f0b7a83d0
- SHA1 bb029df476c91ed88b6293f95c91412581be4f8f
- SHA512 afa1b621ca2e171f6369f33dd108d02eaec25c243d608fdd898d42604c4202c48808359fdafc735a11a4260d858c4cce7e534573be8bbe2acc092116e1b05c47
- SSDEEP 3072:AzJBvuqmBCSql3lekVwd0XN2Cw+MW545BwjNSoJpMIGBTc+boSK:AzJBxNjVpPM+yyB/Peh
- TLSH T13E245B6BD21371FCE652C07892663222B772F93947349DF70392C3319E22AC46E7A975
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10