General
- Target jhgkuyyg.exe
- Size 221KB
- Sample260819-qs772abq6t
- SHA256 54af18d3bab01321bf5c186b7a4b0124620b6341fbe028f7ce67ad5bf0822a10
- MD5 54f4f89af5024581e8c9cbd411dfce35
- SHA1 0641d7405e9bbbae82ca7fb535608403fa1cc034
- SHA512 515ccff566d6df7643b4cf48b3238d927f3300769a3712ca0efb17c98558c5ec8105a42e14e26765c82c1c7c7a13924ff19d2029214d33efeb40a7196f895b3c
- SSDEEP 3072:l7UIS6FDGrsXSFIUq0B+ZR46XU2ICw99eoW2NC55IKkZsWhSWiE+US9LyPJj3XX:2Ad02VP09TW2ApkZsWhK9US9yJjnX
- TLSH T128243A2BD21371FCD552C07892667222B772BA3847249EF703A3C3359E61EC05E7AA75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
jhgkuyyg.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
jhgkuyyg.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://poagint.click:8592/attachments
-
http://vexdico.shop:8539/attachments
-
http://kupzovo.shop:7567/tokens
Targets
-
- Target jhgkuyyg.exe
- Size 221KB
- SHA256 54af18d3bab01321bf5c186b7a4b0124620b6341fbe028f7ce67ad5bf0822a10
- MD5 54f4f89af5024581e8c9cbd411dfce35
- SHA1 0641d7405e9bbbae82ca7fb535608403fa1cc034
- SHA512 515ccff566d6df7643b4cf48b3238d927f3300769a3712ca0efb17c98558c5ec8105a42e14e26765c82c1c7c7a13924ff19d2029214d33efeb40a7196f895b3c
- SSDEEP 3072:l7UIS6FDGrsXSFIUq0B+ZR46XU2ICw99eoW2NC55IKkZsWhSWiE+US9LyPJj3XX:2Ad02VP09TW2ApkZsWhK9US9yJjnX
- TLSH T128243A2BD21371FCD552C07892667222B772BA3847249EF703A3C3359E61EC05E7AA75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10