Extracted

• • Target
    KiddonsModMenu/KiddonsModMenu.exe
  • Size 891.6MB
  • SHA256 f6f343191881fafb3f20354f3f868ec3d8879d753f4b3d28f6f32bed5c8006f1
  • MD5 9fdf06945cd064001000d81579dce237
  • SHA1 3aca4cab19333feeebae994ee748ae83935bb1c8
  • SHA512 ca905bde572274fce1f8e4f1476c06830260265d4d97016b775b0c4e17bd018d0e86e5399df2a732a2c205dbcdcf1dbefc1acbf163774a0d90e9ebc1bf0900a0
  • SSDEEP 24576:KBQ5ZEqSm3Q7ez7AsUY17S8MssMfI6UAeUJheSgk0HKsrJD1cc:KBEZbSm3K2f17SaFggeUOSgk0XJD1N
  • TLSH
    T14FA949067CD424BAD9FA933289B11291B731F8990B2127C72F55B3B92E377D40E793A4
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  1df60ba477f3af01b8adc920ea2d006ediscoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2