General
- Target arFtU.exe
- Size 220KB
- Sample260817-gzhfhsvaqb
- SHA256 9ed7cf4411a1b2668b118929a0535a90a34f4adfe519dc358cdc86b23f7a3e3c
- MD5 6d9495c684546bb7eccb1d5db71e02b4
- SHA1 5cab2964418e23c2291c352e336131aef9ac29cd
- SHA512 915782184bb2ae7587b5bcb5ceb65161da3dc1c695b1c8d36c430ce788c4a47bc35df2afcf21ca604ad999c69ad6cd5bd9ed1445d61fc00507aa0d74deccd90b
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkb22:RytB2hpUuo5ZQMknpW22
- TLSH T11624182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
arFtU.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
arFtU.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://zelpx.garden:9895
-
http://fimmora.surf:6504
-
http://tzpx.courses:4437
Targets
-
- Target arFtU.exe
- Size 220KB
- SHA256 9ed7cf4411a1b2668b118929a0535a90a34f4adfe519dc358cdc86b23f7a3e3c
- MD5 6d9495c684546bb7eccb1d5db71e02b4
- SHA1 5cab2964418e23c2291c352e336131aef9ac29cd
- SHA512 915782184bb2ae7587b5bcb5ceb65161da3dc1c695b1c8d36c430ce788c4a47bc35df2afcf21ca604ad999c69ad6cd5bd9ed1445d61fc00507aa0d74deccd90b
- SSDEEP 3072:fUsyMqDB20+pi9v0JmaiuuuLErSCZQMuSQnppkb22:RytB2hpUuo5ZQMknpW22
- TLSH T11624182BC26375FCD552C07852666232B733B93D47295EF703A2C3359E21AC06E79A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10