General
- Target hnmh.exe
- Size 5.4MB
- Sample260819-p6jadsvbqe
- SHA256 e015331aa97b6dc4b2bf1354ec2e22b6e9d67f011295ea2aa46a21461abc35a5
- MD5 c640b679fd7c64ebb7f9e146dfba2278
- SHA1 e52c62b4a7572f62c39f5bad353992601ec75fc7
- SHA512 320caa91a3128bead1001a0a2dc54bf2d6bda0799b247d9d0f3d5063e599e47d45d8de64501923367b0fd7d3011b7fbe8019b9ad3584a3baebd147cda03bf167
- SSDEEP 49152:l/xs/zJcTcMJgibNrb/TzvO90d7HjmAFd4A64nsfJEzuO/YgmkMMZKlN66rZgefM:uKJZbOemQLSY
- TLSH T1AE465907BD5550B8C9E6E73485BB0612B634BC49873037D32F52AAB82F327D19EBA714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hnmh.exe
Resource
win10v2004-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral2
Sample
hnmh.exe
Resource
win10ltsc2021-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral3
Sample
hnmh.exe
Resource
win11-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral4
Sample
hnmh.exe
Resource
win11ltsc2024-20260709-en
1 signatures
300 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://poagint.click:8592/tags
-
http://vexdico.shop:8539/workspaces
-
http://kupzovo.shop:7567/addresses
Targets
-
- Target hnmh.exe
- Size 5.4MB
- SHA256 e015331aa97b6dc4b2bf1354ec2e22b6e9d67f011295ea2aa46a21461abc35a5
- MD5 c640b679fd7c64ebb7f9e146dfba2278
- SHA1 e52c62b4a7572f62c39f5bad353992601ec75fc7
- SHA512 320caa91a3128bead1001a0a2dc54bf2d6bda0799b247d9d0f3d5063e599e47d45d8de64501923367b0fd7d3011b7fbe8019b9ad3584a3baebd147cda03bf167
- SSDEEP 49152:l/xs/zJcTcMJgibNrb/TzvO90d7HjmAFd4A64nsfJEzuO/YgmkMMZKlN66rZgefM:uKJZbOemQLSY
- TLSH T1AE465907BD5550B8C9E6E73485BB0612B634BC49873037D32F52AAB82F327D19EBA714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10