General
- Target ojujn.exe
- Size 220KB
- Sample260816-snwdsadn3s
- SHA256 5427697ac818f7938a47b87a86d4be056725115f55d40649b8ef983680acb91d
- MD5 40c28375c99b9e2e386ee1aaeaad8ac4
- SHA1 d0b1841fe591f83105349094a80ae63309d2d165
- SHA512 03485c10b93f461cb068c8ed3e2d82db3ac56022b2b3f8c1c2f7d20d0252fcf479aced7826229ebfd0c22c310eed18f2bd06f145d7f6b5ec3fe3db63cbdc07ed
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkbY2:RytB2hpUuo5ZQMknpWY2
- TLSH T11524182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
ojujn.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ojujn.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
-
http://tzpx.courses:4437
Targets
-
- Target ojujn.exe
- Size 220KB
- SHA256 5427697ac818f7938a47b87a86d4be056725115f55d40649b8ef983680acb91d
- MD5 40c28375c99b9e2e386ee1aaeaad8ac4
- SHA1 d0b1841fe591f83105349094a80ae63309d2d165
- SHA512 03485c10b93f461cb068c8ed3e2d82db3ac56022b2b3f8c1c2f7d20d0252fcf479aced7826229ebfd0c22c310eed18f2bd06f145d7f6b5ec3fe3db63cbdc07ed
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkbY2:RytB2hpUuo5ZQMknpWY2
- TLSH T11524182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10