General
- Target 50be7c20414d2895ca3b65631ba47ffbfe18e358ba4c8e3e52dc9ff875d5f7bb.bin
- Size 9.8MB
- Sample260912-sd1krayhmf
- SHA256 50be7c20414d2895ca3b65631ba47ffbfe18e358ba4c8e3e52dc9ff875d5f7bb
- MD5 5df8a467787199b10ad9fea8f55132a4
- SHA1 d4aebf0d9c96883992e74f1a43c12365024c4e06
- SHA512 3a494f2e1db998760020837ea527487d3661687f849db3a0ac6f8dba94c4b8383fd1584eb76f27b276a2aff13e89b0d0cedc7d6236d6225aad4197746841567b
- SSDEEP 98304:lGpLUcuxYriMm7DXr9nqapeqRfA9oJdQhl:lYKiriMm7DXr9qapeqRfooJdQhl
- TLSH T116A62817A9005190E8969E3CD9375225F6347C4DD7B233678D61AAB82F373C2BEB9B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
50be7c20414d2895ca3b65631ba47ffbfe18e358ba4c8e3e52dc9ff875d5f7bb.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
50be7c20414d2895ca3b65631ba47ffbfe18e358ba4c8e3e52dc9ff875d5f7bb.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://teculse.click:9210/settings
-
http://arqtsop.shop:9932/subscriptions
-
http://trwehop.shop:5627/invoices
Targets
-
- Target 50be7c20414d2895ca3b65631ba47ffbfe18e358ba4c8e3e52dc9ff875d5f7bb.bin
- Size 9.8MB
- SHA256 50be7c20414d2895ca3b65631ba47ffbfe18e358ba4c8e3e52dc9ff875d5f7bb
- MD5 5df8a467787199b10ad9fea8f55132a4
- SHA1 d4aebf0d9c96883992e74f1a43c12365024c4e06
- SHA512 3a494f2e1db998760020837ea527487d3661687f849db3a0ac6f8dba94c4b8383fd1584eb76f27b276a2aff13e89b0d0cedc7d6236d6225aad4197746841567b
- SSDEEP 98304:lGpLUcuxYriMm7DXr9nqapeqRfA9oJdQhl:lYKiriMm7DXr9qapeqRfooJdQhl
- TLSH T116A62817A9005190E8969E3CD9375225F6347C4DD7B233678D61AAB82F373C2BEB9B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10