Analysis
- max time kernel
149s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/09/2026, 11:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
installer1.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
installer1.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target installer1.exe
- Size 4.6MB
- Sample260909-n4physwvat
- SHA256 4eaedddd70557d9f54867d6552b78b395f65449c0e7a6d66c6822a88825d6d8d
- MD5 26656db0e80ac987410750f3a81b31cc
- SHA1 5f07e641ce0f8f944a9d9cdbf87dea91a8cbb335
- SHA512 d8ec1a6906ecc2303150788099effd58cd666273686de3d59c8dbf0d5b74ad97314d8cdc36e5c738002a4eaf66daae35569ab97ef8646774abe5099bfb62541d
- SSDEEP 98304:9osGaN0GrY8BQOdGF7AH9I8SiSBpCBbdeWBbaLFUtf95KtbDkbSd9NnybwF9P70n:9wh/8Rd
- TLSH T1742639037B9540E4D55AD638C97A62A3EA20FC8C9B3123D72F40B6702F657D1ACB6F58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://drrizon.click:6271/webhooks
-
http:// topbnds.shop:8592/imports
-
http://shozter.shop:9895/imports
Signatures
- Family: Remus
Remus is a stealer written in C++.