General
- Target file.exe
- Size 1.1MB
- Sample260916-w2rvascc34
- SHA256 ef26bed8d743c5c73c274923bbd977e3208f73d6569f61ccc0118675a655809c
- MD5 4e4013dd5a23d90de8389fa2baf70e9f
- SHA1 3e1916fb536c8309301b1c77850940bc98e86048
- SHA512 e533b3772f59181b027e90deec7c6717fad1f4764bf3026dec2235941f119a00c4b110787767b7f07d30f237c6c48c9a1840cc44ba434ab197ae5a34c9091b50
- SSDEEP 24576:Wq8f/QRTPY22kMDdMRUAFUSzNjT+mz7iKwF1:oQRDY22SPUKtGKw
- TLSH T153359D129E944923C76E2E39ECB353130A33A3CB6E19E826F5670D5D59FAB8115073D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://kipthen.shop:9932/workspaces
-
http://fuarnpp.shop:5627/images
-
http://tfoyses.shop:3452/comments
Targets
-
- Target file.exe
- Size 1.1MB
- SHA256 ef26bed8d743c5c73c274923bbd977e3208f73d6569f61ccc0118675a655809c
- MD5 4e4013dd5a23d90de8389fa2baf70e9f
- SHA1 3e1916fb536c8309301b1c77850940bc98e86048
- SHA512 e533b3772f59181b027e90deec7c6717fad1f4764bf3026dec2235941f119a00c4b110787767b7f07d30f237c6c48c9a1840cc44ba434ab197ae5a34c9091b50
- SSDEEP 24576:Wq8f/QRTPY22kMDdMRUAFUSzNjT+mz7iKwF1:oQRDY22SPUKtGKw
- TLSH T153359D129E944923C76E2E39ECB353130A33A3CB6E19E826F5670D5D59FAB8115073D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of SetThreadContext