Resubmissions

18/08/2026, 10:20

260818-mdgvrazgre10

18/08/2026, 07:17

260818-h4k8msga6510

General

  • Target
    hjbk.exe
  • Size 219KB
  • Sample260818-mdgvrazgre
  • SHA256 de045904e83594cd3146d97da1e18da581bc4213eab7b7edcd81e8aaeb82b223
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • remus_stealer

C2
  • http://fasnzect.click:4929/exports

  • http://vexdico.shop:8539/projects

  • http://kupzovo.shop:7567/collections

Targets

    • Target
      hjbk.exe
    • Size 219KB
    • SHA256 de045904e83594cd3146d97da1e18da581bc4213eab7b7edcd81e8aaeb82b223
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v16

Tasks