General
- Target hnmh.exe
- Size 220KB
- Sample260817-dnp5fascpd
- SHA256 6bd6fa3ccb55bc8f50695f126ad12e217f38bd4cb0038d8ee2ca971041c1d858
- MD5 e06aa8868a52dfaf41add2dcb36e9ae5
- SHA1 5ff84b20b7b185e6dd4f5c4be064a3c06b9aadc1
- SHA512 1da3b6851f3cfae02f8dad4be662a46a5b0171d66fb15bd54c7f0e18db51b6451e1c9891903206d32ec5afd1d5a04f8e14d054c6c0ec55ba5458040f78762702
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkbK2:RytB2hpUuo5ZQMknpWK2
- TLSH T14524182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
hnmh.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
hnmh.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
-
http://tzpx.courses:4437
Targets
-
- Target hnmh.exe
- Size 220KB
- SHA256 6bd6fa3ccb55bc8f50695f126ad12e217f38bd4cb0038d8ee2ca971041c1d858
- MD5 e06aa8868a52dfaf41add2dcb36e9ae5
- SHA1 5ff84b20b7b185e6dd4f5c4be064a3c06b9aadc1
- SHA512 1da3b6851f3cfae02f8dad4be662a46a5b0171d66fb15bd54c7f0e18db51b6451e1c9891903206d32ec5afd1d5a04f8e14d054c6c0ec55ba5458040f78762702
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkbK2:RytB2hpUuo5ZQMknpWK2
- TLSH T14524182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10