Analysis
- max time kernel
149s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
15/08/2026, 08:58
General
- Target mpclient.dll
- Size 2.8MB
- Sample260815-kxdakattcs
- SHA256 cfabae2edf939f81d3fea8a50ba20555639cebd70afb58e0b2c18f820b75a9d0
Score
10/10
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://bravplo.click:7713/sessions
-
http://mrlketo.shop:8932/customers
-
http://vexdico.shop:8539/workspaces
Signatures
- Family: Remus
Remus is a stealer written in C++.
- Badlisted process makes network request 6 IoCs
Network request originating from process or tool commonly abused by malware.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\mpclient.dll,#11⤵
- Badlisted process makes network request
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2372-0-0x0000000140000000-0x000000014003C000-memory.dmp
memory/2372-2-0x0000000140000000-0x000000014003C000-memory.dmp
memory/2372-1-0x00007FFF6BCC0000-0x00007FFF6BFF1000-memory.dmp