Extracted

• • Target
    2026-07-16_a66e76c02f811e9ffb62e0d0430aabd5_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
  • Size 2.1MB
  • SHA256 0e18cfa0f1678c43f0066861b0b7a40e2a9c6981578983530ef48f03cd31d10a
  • MD5 a66e76c02f811e9ffb62e0d0430aabd5
  • SHA1 1ba69fb69587f89f1f98036508c73ff3d326a3e0
  • SHA512 65ca4d205ed1915adaaf3e10d2567247a2bc83a4ef7521176b72a440f0dac7de15c9cd61f4227119c8d1c1a63c4c32e9518a62f100d9f01bf8c611266ae86262
  • SSDEEP 24576:WbeEuvkgCyw0SN70QXxsqn80vd++Bl2auBGpfMdtxzBele5rK2yyxafzs:WbePvLCylK7/Kw8oT58WfwId
  • TLSH
    T1E6A56B077C9148E9C8AA677288B661917B35BC080F3A27D72F90B7782F727D19D36B44
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2