General
- Target installer.exe
- Size 17.3MB
- Sample260908-sdlrlaswbt
- SHA256 0917ecd8ebfb2ef6f9fb4a7687ca51e842bd9edb1a1e24b30803e3d213cf324f
- MD5 9878c275a40bd2d6f63698b36c65890b
- SHA1 a8eef4f895067616efa923b072fa0cf98b65b2a5
- SHA512 a493ceefb2b37d568cfb871b393b15cc364f499cd88a8672859bd6ef63b4020e6813990ff62c85174b9274e266b32a8114a9b18d718998cedd4176076d6da1ee
- SSDEEP 49152:hZ5Wre+Zk4phU3MJ7CAsGllFvmSD4O//eDP66y8rpxxqn9HsWORudliSFgQ0JA8U:hZ5v+2wZtPpiZps
- TLSH T1E3073A17FA9110D9C45EE338866B17527B30BC4D9B3273E32E916A743E66BE2AC75700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
installer.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
installer.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://drrizon.click:6271/documents
-
http://trencts.shop:8592/imports
-
http://smaring.shop:9895/customers
Targets
-
- Target installer.exe
- Size 17.3MB
- SHA256 0917ecd8ebfb2ef6f9fb4a7687ca51e842bd9edb1a1e24b30803e3d213cf324f
- MD5 9878c275a40bd2d6f63698b36c65890b
- SHA1 a8eef4f895067616efa923b072fa0cf98b65b2a5
- SHA512 a493ceefb2b37d568cfb871b393b15cc364f499cd88a8672859bd6ef63b4020e6813990ff62c85174b9274e266b32a8114a9b18d718998cedd4176076d6da1ee
- SSDEEP 49152:hZ5Wre+Zk4phU3MJ7CAsGllFvmSD4O//eDP66y8rpxxqn9HsWORudliSFgQ0JA8U:hZ5v+2wZtPpiZps
- TLSH T1E3073A17FA9110D9C45EE338866B17527B30BC4D9B3273E32E916A743E66BE2AC75700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10