Extracted

• • Target
    cx-programmer 9.1 free download full.exe
  • Size 2.1MB
  • SHA256 ef28589b4815650c4d9e08ca81c1ee189a3f58f3e5dad3dc41994528270d2102
  • MD5 db05b2b6064588fc59fa402a7ed42c60
  • SHA1 dac24f7cbcb468275efca33f268e1868896913da
  • SHA512 aa84c864742eef5454243dad7869f31fb870802bc477655fd1764fbba061832ee4196c59d2ad8e45b6ef41e8fd61099646f9f1a1b1cdb2313943967a33301d0d
  • SSDEEP 24576:/JzsSjcNZ8KNgyWyuzxvfOiOjReQ73KFt/j3OWctkJBele5r9DY70V1e:/JAIcNGKNqyOfOhVbi/j3/K
  • TLSH
    T116A54A077CE148EAC4AA973189B652927B70BC490F7263D72E90B6783F727E09D36744
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Downloads MZ/PE file

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2