RemusStealer.exe

Classification: Malicious

RemusStealer.exe is a trojan (Windows 64-bit executable). Detected by 22 antivirus engines. Reported by 3 threat sources, last seen 2026-10-18.

Detection summary

  • 22 antivirus detections
  • 2 IDS alerts
  • 0 processes observed
  • 3 contacted hosts
  • 3 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Venus Stealer ThreatFox Abuse.ch 2026-10-18 06:28:26 2026-10-18 07:25:06 malicious-activity
Generic Malware Hybrid-Analysis 2026-10-18 04:45:04 2026-10-18 04:45:04 malicious-activity
RemusStealer MalwareBazaar Abuse.ch 2026-10-17 23:28:27 2026-10-17 23:28:27 malicious-activity

Tags

evasive py.venus_stealer

Sample information

Filenames
RemusStealer.exe, file
File type
PE32+ executable for MS Windows 6.01 (GUI), x86-64 ...
MD5
ce8cd7ff4a20d2e54511fd473890f9ed
SHA-1
32c8e90b75f37bdaabab9e32ede708969930d501
SHA-256
d44e6faaf3df358593a29faace64a071ab8de0a84c30a5232d8e9081dd668f1b
First indexed
2026-10-17 23:28:27
Last updated
2026-10-18 07:46:44

Antivirus detections

EngineDetection
AVGWin64:MalwareX-gen [Cryp]
AlibabaTrojan:Win32/Reconyc.1673d5ee
AvastWin64:MalwareX-gen [Cryp]
AviraTR/W64.Evo
BkavW32.Malware.7F6C255A
CrowdStrikewin/malicious_confidence_60% (D)
ESET-NOD32WinGo/Kryptik.ABE trojan
Elasticmalicious (high confidence)
F-SecureTrojan.TR/W64.Evo
FortinetW64/Vidar.YI!tr
GoogleDetected
KasperskyUDS:Trojan.Win32.AntiAV
MicrosoftTrojan:Win32/Wacatac.B!ml
Paloaltogeneric.ml
SangforTrojan.Win64.Agent.Vtco
SkyhighArtemis
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TencentWin32.Trojan.FalseSign.Uimw
TrellixENSArtemis!CE8CD7FF4A20
VaristW64/WinGo.J.gen!Eldorado
alibabacloudTrojan:Multi/Bearfoos.B9nj

Network contacts

193.233.75.14 208.95.112.1 104.26.12.205

DNS requests

api.ipify.org ip-api.com rg1k98tivqqmmjm238ntbg0tkwo5ejnwecwn1.com