General
- Target xqAAE.exe
- Size 223KB
- Sample260816-phs5paxdrh
- SHA256 f1e5a42ce97ecf8ab63ecd7e9fe70c318c25151c009092660b913ac9f3adbe8b
- MD5 20f7f0168195280fffa72e6a35b33d4c
- SHA1 137bdee76a906a6cd54d304933e8ed5bedfc99e2
- SHA512 5950aa5ffb40a33b26e0468161e107e9b17dca8477564229917576f03995cebaa6acfde82140fdea5da213a23004c3c182b865f569bcb8588a23967ea3375032
- SSDEEP 3072:xYQQiw49+KjjP8eV4R9VH0SVyTgGFxDq1LtlKFCD6bmbYFUrOAFiyVUycrd:xr8VyS6D+H4Hy8KaqLwrd
- TLSH T17B242A6BC31371FCD552C07892667222BB72BA3947309EF703A2C7359D22EC06E79965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
xqAAE.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
xqAAE.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://clledge .biz:7752/messages
-
http://mrlketo.shop:8932/comments
-
http://vexdico.shop:8539/posts
Targets
-
- Target xqAAE.exe
- Size 223KB
- SHA256 f1e5a42ce97ecf8ab63ecd7e9fe70c318c25151c009092660b913ac9f3adbe8b
- MD5 20f7f0168195280fffa72e6a35b33d4c
- SHA1 137bdee76a906a6cd54d304933e8ed5bedfc99e2
- SHA512 5950aa5ffb40a33b26e0468161e107e9b17dca8477564229917576f03995cebaa6acfde82140fdea5da213a23004c3c182b865f569bcb8588a23967ea3375032
- SSDEEP 3072:xYQQiw49+KjjP8eV4R9VH0SVyTgGFxDq1LtlKFCD6bmbYFUrOAFiyVUycrd:xr8VyS6D+H4Hy8KaqLwrd
- TLSH T17B242A6BC31371FCD552C07892667222BB72BA3947309EF703A2C7359D22EC06E79965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10