Overview

overview

10

Static

static

3

2026-10-22...om.exe

windows10-2004-x64

10

2026-10-22...om.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-10-22_4c5e93094587613353bcbc90d00ada72_cobalt-strike_icedid_satacom
  • Size 13.8MB
  • Sample261024-q85f3svtew
  • SHA256 95e79a86be9dd93958c52384ab19f3d7547161c714e69e73fea1755a4a4ed688
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
remus_stealerdefense_evasionprivilege_escalationstealer

Malware Config

Extracted

Family

  • remus_stealer

C2

  • http://youngel.biz:8768

  • http://carogra.biz:4219

  • http://myrtler.biz:9549

Targets

    • Target
      2026-10-22_4c5e93094587613353bcbc90d00ada72_cobalt-strike_icedid_satacom
    • Size 13.8MB
    • SHA256 95e79a86be9dd93958c52384ab19f3d7547161c714e69e73fea1755a4a4ed688
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasionremus_stealerprivilege_escalationstealer

    • Detects Remus stealer

    • Family: Remus

      Remus is a stealer written in C++.

      stealerremus_stealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks