General
- Target hjbk.exe
- Size 220KB
- Sample260816-spjrda1xdt
- SHA256 48ea9971f24bd740b3f65ae4db0c4ef03d007e98b030a0c7733f4d374df4e010
- MD5 f762463154bb1d7aadc38bd58c7dc7ce
- SHA1 fcde9d4c687c8610ea022815b95cac8c7ebfdc56
- SHA512 6aa0bbfba4cbe8bf256bebbebc0b3840a42c5ab685b19e5488252ff1f5b8c6fb03819629c1829b29d4206abdf776b0f22fa4cbf6f872184433b472d82576eca9
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkb92:RytB2hpUuo5ZQMknpW92
- TLSH T12224182BC26375FCD552C07852666232B733B93C47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
hjbk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
hjbk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
-
http://tzpx.courses:4437
Targets
-
- Target hjbk.exe
- Size 220KB
- SHA256 48ea9971f24bd740b3f65ae4db0c4ef03d007e98b030a0c7733f4d374df4e010
- MD5 f762463154bb1d7aadc38bd58c7dc7ce
- SHA1 fcde9d4c687c8610ea022815b95cac8c7ebfdc56
- SHA512 6aa0bbfba4cbe8bf256bebbebc0b3840a42c5ab685b19e5488252ff1f5b8c6fb03819629c1829b29d4206abdf776b0f22fa4cbf6f872184433b472d82576eca9
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkb92:RytB2hpUuo5ZQMknpW92
- TLSH T12224182BC26375FCD552C07852666232B733B93C47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10