General
- Target ARbeb.exe
- Size 220KB
- Sample260816-148caaycla
- SHA256 3ea4388217eb6a05c59961b422be6dc2ef0a085a29bd7cd4173a6bd9e2b925d3
- MD5 e3979ecab65b55572773107ca5e3debf
- SHA1 a9cb47847adc85ffe186399b5c981aead538c715
- SHA512 01ac53e22fc650c687ce17d9bb8aea84e7c0e2be12f2aa7be9629a6c28ccb562cbec37ab1d3bc41e82bb0a2114f941f5870e9acbcda380226e342ccbaf8cf016
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkbd2:RytB2hpUuo5ZQMknpWd2
- TLSH T17524182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
ARbeb.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ARbeb.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://tzpx.courses:4437
-
http://fimmora.surf:6504
Targets
-
- Target ARbeb.exe
- Size 220KB
- SHA256 3ea4388217eb6a05c59961b422be6dc2ef0a085a29bd7cd4173a6bd9e2b925d3
- MD5 e3979ecab65b55572773107ca5e3debf
- SHA1 a9cb47847adc85ffe186399b5c981aead538c715
- SHA512 01ac53e22fc650c687ce17d9bb8aea84e7c0e2be12f2aa7be9629a6c28ccb562cbec37ab1d3bc41e82bb0a2114f941f5870e9acbcda380226e342ccbaf8cf016
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkbd2:RytB2hpUuo5ZQMknpWd2
- TLSH T17524182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10