Extracted

• • Target
    cx-programmer 9.1 free download full.exe
  • Size 2.1MB
  • SHA256 3ba99db65562fb77809377f123813196370fa6194371fba47f4bfc5ddd1e2fff
  • MD5 423a861e99f23311a3a574b6486818c3
  • SHA1 aeadbaf3f595abc345fc04b62b603a9005667ba7
  • SHA512 2d9f71ed0381da7bfe752cc9e971f262b12ab8653dcad9dc752eb79ee460e32483276e77a04606cce720970222fe521ea82bdc831fbef7c4f3f6ac1dbc6b8cdc
  • SSDEEP 24576:wKNCjSmU3yF+qeQi3R3HsfosIlMK1Cl8Y8bDzLStxzBele5rK2mMxa8:wK4em0yLeQgR3eX9K7nc4
  • TLSH
    T1BBA56C077DE009E9C8AAA3358CB612967B34BC594F3223D72E9076782FB27D09C75794
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerstealerspyware

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2