Extracted

• • Target
    2026-06-05_1636442afc17d11a96598fd1220fcf42_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
  • Size 2.1MB
  • SHA256 77e27dce878b7cfab3f7f57e76b964af1fe2acae5bd012c3a30414d073358724
  • MD5 1636442afc17d11a96598fd1220fcf42
  • SHA1 a0d9f1974e3d3cb690bf3d57439271e5d3212d7f
  • SHA512 3db563e6d6a99bc6e86f99af0579cd4823b8691be2f579e565364d48ff05b1e9ee65500999444e000f041aef05bab698e946029a6a4145339b4032bae4960096
  • SSDEEP 24576:96Vu/67EfWela6mRXgDmqum50w6Xl+oONo/nBele7tKDyi3nMiS/:96k/6wfk6SXmmI0BXlm6nRiQ
  • TLSH
    T1C9A54A4BACE408EAC4AEA33289B351927B75BC490F3263D72A51B3782F736E45C35754
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2