MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8923aca5091d95b50052efcafe757a243462be44bb17f0c6323db74cdb59ae07. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8923aca5091d95b50052efcafe757a243462be44bb17f0c6323db74cdb59ae07
SHA3-384 hash:	3f61c0bb25f5e7beabd3d6820fce7f59075128a03bab0d1f458e3dc5baade83196307ec65fb6dc295e5ff7a491d738b4
SHA1 hash:	0d5cb8ee597faa909d355429317a95a7e58ea746
MD5 hash:	71b98686e02e0f5317cbe2b1e2856d69
humanhash:	nebraska-ohio-early-three
File name:	JStarterelchX.exe
Download:	download sample
Signature	RemusStealer Alert Create hunting rule
File size:	154'113'913 bytes
First seen:	2026-09-12 13:10:07 UTC
Last seen:	Never
File type:	exe
MIME type:	application/x-dosexec
imphash	ebc247a77b4d4a804b261f97a1fd075c (126 x Vidar, 32 x RemusStealer, 26 x Smoke Loader)
ssdeep	49152:SEsQKR1XO8iTkZKlmvST7CdmxcDC37Rdwf:SyaRMUvSTTyC30f
TLSH	T1267842C2CE3E1B66E569CC25F18BD43662C125412DA14F31C3E8F7115AEEDBDA628336
TrID	33.1% (.EXE) Win64 Executable (generic) (6522/11/2) 25.6% (.EXE) Win16 NE executable (generic) (5038/12/1) 10.4% (.ICL) Windows Icons Library (generic) (2059/9) 10.3% (.EXE) OS/2 Executable (generic) (2029/13) 10.1% (.EXE) Generic Win/DOS Executable (2002/3)
Magika	pebin
dhash icon	e0f0e0cccce0f0e0 (1 x RemusStealer)
Reporter	Anonymous
Tags:	exe Remus RemusStealer

Anonymous

Distributed via YouTube

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

191

Origin country :

RO

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

81.4%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ac9b92c8ae954d3e2066a67

Tags:

injection virus

Hybrid Analysis Malicious

Verdict:

Malicious

Link:

https://www.hybrid-analysis.com/sample/8923aca5091d95b50052efcafe757a243462be44bb17f0c6323db74cdb59ae07

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

exe x64

First seen:

2026-09-12T11:13:00Z UTC

Last seen:

2026-09-12T13:24:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/8923aca5091d95b50052efcafe757a243462be44bb17f0c6323db74cdb59ae07/results?tab=lookup

Nucleon Malprob Malware

Score:

89%

Verdict:

Malware

File Type:

PE

Link:

https://malprob.io/report/8923aca5091d95b50052efcafe757a243462be44bb17f0c6323db74cdb59ae07

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win64.Trojan.Generic

Threat name:

Win64.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-09-12 13:11:42 UTC

File Type:

PE+ (Exe)

Extracted files:

4

AV detection:

11 of 24 (45.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rer2zjijdwk3kacs57fp45l2eq2gfpsexml7brrshw3uzw2zvydq._file

Threatray Remus

Verdict:

malicious

Label(s):

Remus

Alert

Create hunting rule

Link:

https://reports.threatray.com/98702f85-94b8-4549-aa8d-c862d466c6ee

Hatching Triage

Gathering data

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.