General
- Target kJHGFDs.exe
- Size 220KB
- Sample260817-dnct4sdq7y
- SHA256 9f35867944a3c6ff48ec35fc3b5a2ae158ae81fba43928106833509ae8d060dd
- MD5 9ca0c74d462a79d2cb8b1b5ffcbe0bc4
- SHA1 bb6c0e2cf46f497cedc873bd35a7258622ca6a1a
- SHA512 b59d0045d80a43d99807e1ebabd248ecaff3f284a78910dcef295fdda9531da2a0ff8898bb91af8a10684470caf9c66577bc4230bb1fd5981e350a80e623536a
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkby2:RytB2hpUuo5ZQMknpWy2
- TLSH T13024182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
kJHGFDs.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
kJHGFDs.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://tzpx.courses:4437
-
http://fimmora.surf:6504
Targets
-
- Target kJHGFDs.exe
- Size 220KB
- SHA256 9f35867944a3c6ff48ec35fc3b5a2ae158ae81fba43928106833509ae8d060dd
- MD5 9ca0c74d462a79d2cb8b1b5ffcbe0bc4
- SHA1 bb6c0e2cf46f497cedc873bd35a7258622ca6a1a
- SHA512 b59d0045d80a43d99807e1ebabd248ecaff3f284a78910dcef295fdda9531da2a0ff8898bb91af8a10684470caf9c66577bc4230bb1fd5981e350a80e623536a
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkby2:RytB2hpUuo5ZQMknpWy2
- TLSH T13024182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10