General
- Target xcutorsLoader.exe
- Size 3.6MB
- Sample260908-tr6vcsthrc
- SHA256 a5c49d510384172103726857fd054cb8b28ea950d7d80497e785304af80002db
- MD5 9ff63cf7a5ea46e7736905a5e5cbbe49
- SHA1 b9d11dcbd71e1509227ac13315b6f2cdfd3a7eff
- SHA512 c6a8ed835f8fb99661218eeb00fb94a3ca1da731952d437478938444b5c13e063fa4857f6e847419a238c832d75e535339c82d9dd0c4b25fa5ada64ec721aa14
- SSDEEP 24576:IZhUIx8LRgtn5XnipHq9cNNpXUWN2tKhOOWdp3+XZr1ayVpD2MnxwZdMtPyBVMgB:IZhRx8LGtn9p9cNN70t2OOWdA6JdVS6
- TLSH T1E8062A037B9085D8D85AE239867B42A1B635BC5C9B32B3E71B8079743E737D1A839F14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
xcutorsLoader.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://futlink.click:4326/products
-
http://trencts.shop:8592/workspaces
-
http://quicbud.shop:7647/folders
Targets
-
- Target xcutorsLoader.exe
- Size 3.6MB
- SHA256 a5c49d510384172103726857fd054cb8b28ea950d7d80497e785304af80002db
- MD5 9ff63cf7a5ea46e7736905a5e5cbbe49
- SHA1 b9d11dcbd71e1509227ac13315b6f2cdfd3a7eff
- SHA512 c6a8ed835f8fb99661218eeb00fb94a3ca1da731952d437478938444b5c13e063fa4857f6e847419a238c832d75e535339c82d9dd0c4b25fa5ada64ec721aa14
- SSDEEP 24576:IZhUIx8LRgtn5XnipHq9cNNpXUWN2tKhOOWdp3+XZr1ayVpD2MnxwZdMtPyBVMgB:IZhRx8LGtn9p9cNN70t2OOWdA6JdVS6
- TLSH T1E8062A037B9085D8D85AE239867B42A1B635BC5C9B32B3E71B8079743E737D1A839F14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10