General
- Target QuickFetch.exe
- Size 1.4MB
- Sample260822-yl2exaydqe
- SHA256 f48debf0e99b16130594458c82205af33785a97f7d3df4cfed7cd30acd266b2d
- MD5 3f9d90923d2d9bba0de4e375d8f3cd11
- SHA1 56a11de9764cb29c2821441b10bf68f2b9d1a40b
- SHA512 615a6624df6dfb2bdc7b8fefac057fe3c092cfdb193740f3a2baa5e1f2d055f6fa8d72406384168dbc14698ff2bec1a2d57bfebe023f2537d566a819c6e6969e
- SSDEEP 24576:UWSwy7GSBhKMijatSk5pOryr1agRRRxC3M8g2tX/OEH+GS/:XEBhKNjatSkey5agRDc3M8g2tPb+GS
- TLSH T16A65230361E84846F5BD473689F7859B9234FC826B398ACF62A9490D1FB3ED0E13571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
QuickFetch.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://kupzovo.shop:7567/profiles
-
http://vexdico.shop:8539/accounts
-
http://zakuiru.shop:9048/products
Targets
-
- Target QuickFetch.exe
- Size 1.4MB
- SHA256 f48debf0e99b16130594458c82205af33785a97f7d3df4cfed7cd30acd266b2d
- MD5 3f9d90923d2d9bba0de4e375d8f3cd11
- SHA1 56a11de9764cb29c2821441b10bf68f2b9d1a40b
- SHA512 615a6624df6dfb2bdc7b8fefac057fe3c092cfdb193740f3a2baa5e1f2d055f6fa8d72406384168dbc14698ff2bec1a2d57bfebe023f2537d566a819c6e6969e
- SSDEEP 24576:UWSwy7GSBhKMijatSk5pOryr1agRRRxC3M8g2tX/OEH+GS/:XEBhKNjatSkey5agRDc3M8g2tPb+GS
- TLSH T16A65230361E84846F5BD473689F7859B9234FC826B398ACF62A9490D1FB3ED0E13571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Suspicious use of SetThreadContext