Analysis
- max time kernel
298s - max time network
187s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
25/08/2026, 19:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dollar.exe
Resource
win10v2004-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral2
Sample
dollar.exe
Resource
win10ltsc2021-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral3
Sample
dollar.exe
Resource
win11-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral4
Sample
dollar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
300 seconds
General
- Target dollar.exe
- Size 2.6MB
- Sample260825-ykbsvsdr4y
- SHA256 3428e23126f1bfb8c303ebad488ddb6c963585dce02e948c2ec0a10f75a41d9b
- MD5 abfa5be01765e5ede4fc2364b53d3011
- SHA1 8dae55de24cce3d52d5b6b9757fffbcf14520b2f
- SHA512 5b7ee886281515e3321834508f4f0d86d96de3ee66b821abdbd30e34b204f236b28662903722d78ebe4a6adf1c6405fea7888270b24ec28d65ce9fbe5ed79bc9
- SSDEEP 24576:r83qxskVc33beex5HSerqCTWdzt28ftdAuEcCp1Cpb9my+XyK7zzvdKWKUq:8qakVPexzqCTWhV1YfCpbJ47zzQV
- TLSH T126C56A03B89441F5C4A69731C6BA9263BA35BC4E8B3633D72E40B6382F7A7D039B5715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://spareon.click:8811/settings
-
http://shhsift.click:7647/events
-
http://vexdico.shop:8539/notifications
Signatures
- Family: Remus
Remus is a stealer written in C++.