Extracted

• • Target
    2026-06-06_2e8b2556206db6f6f50a0674c87228fc_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
  • Size 2.1MB
  • SHA256 b97ee29263b4f30e7e9899aa8bc058a7649fbcc83a9ad90af356da2567319443
  • MD5 2e8b2556206db6f6f50a0674c87228fc
  • SHA1 9073a9f32faa40516fccfa7ef998cffa1d3807f6
  • SHA512 e0bf326e57954488099cfc5f3b16e26c936286b4eca17837daee97405a966e35f806c420f240c24abbf882e78453a9cab4cf704b97cafb5ed1b61b638bb8795b
  • SSDEEP 24576:KJAqw939dBgkrR3HtIHDXmphvhWHlmWAMxDDxNHP/nBele7tKDyiVn3JiSs:KJhw9NdWk9HteDOhvelLA4D3Bnmi/
  • TLSH
    T158A54A0BBCE508EAC4AAA33289B352927B75BC490F3263D72A51B7382F736D45C35754
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2