General
- Target Installer.zip
- Size 8.9MB
- Sample260912-xsna7asgrc
- SHA256 da049b097b9fb472ace6ed7524013d39dc90a06791e7bb0285421db55efe86aa
- MD5 989f267f2045d425162407932453999d
- SHA1 d8a1db01edbcf6bb3eb2693fa808dcb36983df17
- SHA512 d8958d56b9e7f74521342a5008842f149709c70101b952c2b9a0ba6123da4a8c89f6b6f4e394abfc416eec9e014e4dfb0e9e3f4c6752a7beb7928d0532cad0e5
- SSDEEP 196608:YV/q9EhNU7xyD96IevsDZgN1LTMNU4uINHhCo+VTbYk6Dvd8l9c0P:E/q9QN0y562DZE1sNUk+tb2rd8l9BP
- TLSH T15E96336B1D992C77F10BC2B8E9126C6A1E88F410A209F1705FE93F496790B77D1C9FA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Installer/DW/dw.exe
Resource
win10ltsc2021-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Installer/DW/dw.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Installer/Installer.exe
Resource
win10ltsc2021-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Installer/Installer.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://teculse.click:9210/images
-
http://teechop.shop:8213/articles
-
http://arqtsop.shop:9932/tokens
-
http://teculse.click:9210/webhooks
-
http://arqtsop.shop:9932/files
-
http://trwehop.shop:5627/documents
Targets
-
- Target Installer/DW/dw.exe
- Size 4.4MB
- SHA256 547155c7dc93a5d48c3917a683802b117f9da16f366da7bf282ae1d500b27bff
- MD5 76c1b9f4b7e5dfdeede985f1c5decc3a
- SHA1 f707d99a7afba7612f5beb53d8b84439739b9862
- SHA512 3aa0952a0dfad2127e88ee6d14e0bb87f2d37f67654d8ee25c9690c34876e217f67e52d5d838a391dc88b8108da1f04e383022425255e2578911f3cf3f8b387f
- SSDEEP 49152:TeeNTDhiNbjOKBi4Err6Pgo8mSWGeW1g+0DO2dK7WzrpnJC8TRpF:TegHgGxo8mSWGeW1CjvldF
- TLSH T177262A07BB4864A1D05ADB3DA9BA42A4A734BC8D973223F74E427D702E653D5EC78F01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10 -
- Target Installer/Installer.exe
- Size 3.1MB
- SHA256 8d96306743ddef8912892ca31232b044810d772ce543931ebb900f11556c5079
- MD5 8f873fd1485132f6ab7fddc2abaad76d
- SHA1 7811a6188c836cf9fcbd6a6b6463ee8660d215d1
- SHA512 d0a7da4bd8c115f83911447ab724db2f8afda672610fbdc2e555b7003d2763bb2cdae589b7f247068efd8591eeebba0f21da1b4dd1d11d13ceb80e6d0a8b2814
- SSDEEP 49152:9eaPAwhErGOcfOYIeVbRoos/YdCnJ1iSLV8:9ok6Tzr/YdUJVq
- TLSH T135E55B076C8214D6E45B5B3A41774112BB35BC19CB3673EB2EA4BA342F727C18EB6B44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10