General
- Target ws-Setup-Complete.exe
- Size 4.0MB
- Sample260815-an4faavelc
- SHA256 5cc44ec9af3b258dc4cd4fddccfa03550e8f5d3aa57fe78eb9c0805ed0850182
- MD5 e5fb52cb4836455493489879979cf724
- SHA1 35ac62eefcad505cd25e97b9aff3c147a608c27e
- SHA512 b04b75bb3938f9047e8a10cde530e3355a03423734c34ced74d447aacb9cd409199946ce2fcf40e7b8e79458eed5a8970adb2947590f378fa5220680ef095c06
- SSDEEP 98304:oTTKaw3lqwTABtbFxKmKPqVoZsEIi+nZNd+ZbRA:o3Kaw3l0HiMZNdm2
- TLSH T1A016AD077D9140E5C4EAAB31C5B782627A61BC0C8B7933DB2E90AA782F723D25D75F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ws-Setup-Complete.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ws-Setup-Complete.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://luwerae.click:7748/orders
-
http://mrlketo.shop:8932/profiles
-
http://vexdico.shop:8539/posts
Targets
-
- Target ws-Setup-Complete.exe
- Size 4.0MB
- SHA256 5cc44ec9af3b258dc4cd4fddccfa03550e8f5d3aa57fe78eb9c0805ed0850182
- MD5 e5fb52cb4836455493489879979cf724
- SHA1 35ac62eefcad505cd25e97b9aff3c147a608c27e
- SHA512 b04b75bb3938f9047e8a10cde530e3355a03423734c34ced74d447aacb9cd409199946ce2fcf40e7b8e79458eed5a8970adb2947590f378fa5220680ef095c06
- SSDEEP 98304:oTTKaw3lqwTABtbFxKmKPqVoZsEIi+nZNd+ZbRA:o3Kaw3l0HiMZNdm2
- TLSH T1A016AD077D9140E5C4EAAB31C5B782627A61BC0C8B7933DB2E90AA782F723D25D75F44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10