Extracted

• • Target
    2026-06-04_80ab7f7542073fea7c104e27fa81f1ea_cobalt-strike_frostygoop_hive_luca-stealer_salatstealer_sliver_snatch
  • Size 1.9MB
  • SHA256 3cb6cf764f91c4b80faf8e28681c21e64fc624fca3416cb97f7bdc9d0ab2a529
  • MD5 80ab7f7542073fea7c104e27fa81f1ea
  • SHA1 b86c91f001f9bcb7a01dadfe7049a72a47bb39bd
  • SHA512 e5a76c242894e91ae868f7d26c4ca37ac26127d5b261dbc088c218d1ce9c77c796b2b0add1c573f34bd7067b55a81688f0b4c547f08b64a10a00831575340e79
  • SSDEEP 49152:AgckvBXggYqfYzOe1tRb5vZgRAbNrD1pksg:hgXqfYzOS9ksg
  • TLSH
    T1EE954B4A7C80A1B6D9ED9232997551A17B70BC494F3027C32E6AB7B93E337D40E35398
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2