Resubmissions

28/08/2026, 13:17

260828-qjbsgayard6

28/08/2026, 13:00

260828-p83rtada3710

General

  • Target
    http://pulse.chainfluxgrid3.lol
  • Sample260828-p83rtada37

Malware Config

Extracted

Family
  • remus_stealer

C2
  • http://vexdico.shop:8539/subscriptions

  • http://shhsift.click:7647/users

  • http://fezm.website:9048/reports

Targets

    • Target
      http://pulse.chainfluxgrid3.lol
    • Family: Remus

      Remus is a stealer written in C++.

    • Executes dropped EXE

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v16

Tasks