General
- Target jhgkuyyg.exe
- Size 219KB
- Sample260818-gyctmsff68
- SHA256 b319bbc0206f75fb1f1cd82867c8c6681af97cbd6378e5ed52caf364f992d3bd
- MD5 c7222c9b3cbdcd0c1f962f0bae9e020e
- SHA1 04500a6c49eef0ef29a14960f6f48ea174b2b112
- SHA512 2a1c27db30f19c5413975b7ba6a2d1153ee0e97669c0819f9431fcae4e0409e7e8994d7b548f86c59844bb10cec114852c5d0dbfa5c1b51b796a9e7806fff540
- SSDEEP 3072:Cbn53bMzNxgKH2RjpTwUngPAfhEXPIN19ff9XseiXt9H+iJhwl+Qz+1JJIJj:U5MwF4gNb9XseiF4l+Qz+1JJIJj
- TLSH T1A0244A67D35371FCD652C07892A67222B731B9390720DEFB43A3C735AE22AC06E79525
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
jhgkuyyg.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
jhgkuyyg.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://fasnzect.click:4929/events
-
http://vexdico.shop:8539/comments
-
http://kupzovo.shop:7567/categories
Targets
-
- Target jhgkuyyg.exe
- Size 219KB
- SHA256 b319bbc0206f75fb1f1cd82867c8c6681af97cbd6378e5ed52caf364f992d3bd
- MD5 c7222c9b3cbdcd0c1f962f0bae9e020e
- SHA1 04500a6c49eef0ef29a14960f6f48ea174b2b112
- SHA512 2a1c27db30f19c5413975b7ba6a2d1153ee0e97669c0819f9431fcae4e0409e7e8994d7b548f86c59844bb10cec114852c5d0dbfa5c1b51b796a9e7806fff540
- SSDEEP 3072:Cbn53bMzNxgKH2RjpTwUngPAfhEXPIN19ff9XseiXt9H+iJhwl+Qz+1JJIJj:U5MwF4gNb9XseiF4l+Qz+1JJIJj
- TLSH T1A0244A67D35371FCD652C07892A67222B731B9390720DEFB43A3C735AE22AC06E79525
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Accesses cryptocurrency files/wallets, possible credential harvesting