General
- Target KLLNMF.exe
- Size 225KB
- Sample261001-g67c8a1akb
- SHA256 c302d091a1d13d1599df882ca1fbd86c6d2dc6bb284075439310c89c444e90de
- MD5 8153fdf15c934a15c9a54bc505faa529
- SHA1 9657133e9a4bba01e0a82dbd671b3001cd574758
- SHA512 5c2524e81953527af4d1c498784bc839c0a13ae4de04ae5bac6be77c3c078c416e2d95b0acdb52de92658e2317cbbb268c5bc9f426e776abe2080d0b39cc3815
- SSDEEP 3072:svaKrrR0udjN1z0v34OTmMMaj0aFfeqrxudGTYNbA7mqDs9EluP346DV:svaQrM82BRxdYZeuP346
- TLSH T1C2343B6BD25371FCD552C078A26A7222B771B53C87349EF703A2C3319E21AC06E79A75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
KLLNMF.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
KLLNMF.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
remus_stealer
C2
-
http://Cryptovectorhub3.lol:5478/invoices
-
http://fresok.top:9048/messages
-
http://shhsift.click:7647/subscriptions
Targets
-
- Target KLLNMF.exe
- Size 225KB
- SHA256 c302d091a1d13d1599df882ca1fbd86c6d2dc6bb284075439310c89c444e90de
- MD5 8153fdf15c934a15c9a54bc505faa529
- SHA1 9657133e9a4bba01e0a82dbd671b3001cd574758
- SHA512 5c2524e81953527af4d1c498784bc839c0a13ae4de04ae5bac6be77c3c078c416e2d95b0acdb52de92658e2317cbbb268c5bc9f426e776abe2080d0b39cc3815
- SSDEEP 3072:svaKrrR0udjN1z0v34OTmMMaj0aFfeqrxudGTYNbA7mqDs9EluP346DV:svaQrM82BRxdYZeuP346
- TLSH T1C2343B6BD25371FCD552C078A26A7222B771B53C87349EF703A2C3319E21AC06E79A75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10