General
- Target KLHdfs.exe
- Size 220KB
- Sample260816-spknns1bre
- SHA256 f03300026d0f4cefdf941b6bc8c53ffb91aa9d8b0f621ea5afefd3e5025c7e00
- MD5 dc84b342a7bf3f783e3c3f68d5344969
- SHA1 eb7a17c9f776c9bf701d8167a0363eb44b49a722
- SHA512 37104c9c65619936c9596a16e65af9930a041c71364ee042e0ac278513f1318141b42a726ae46c6345cd8a05e283fb902ac669b5f8c108074d1c4a921d14093d
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkbD2:RytB2hpUuo5ZQMknpWD2
- TLSH T1D224182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
KLHdfs.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
KLHdfs.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://tzpx.courses:4437
-
http://fimmora.surf:6504
Targets
-
- Target KLHdfs.exe
- Size 220KB
- SHA256 f03300026d0f4cefdf941b6bc8c53ffb91aa9d8b0f621ea5afefd3e5025c7e00
- MD5 dc84b342a7bf3f783e3c3f68d5344969
- SHA1 eb7a17c9f776c9bf701d8167a0363eb44b49a722
- SHA512 37104c9c65619936c9596a16e65af9930a041c71364ee042e0ac278513f1318141b42a726ae46c6345cd8a05e283fb902ac669b5f8c108074d1c4a921d14093d
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkbD2:RytB2hpUuo5ZQMknpWD2
- TLSH T1D224182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10