Extracted

• • Target
    vector magic desktop edition full crack.7z
  • Size 17.3MB
  • SHA256 e013dc84ff53894a8f11f402ddde9130eef83a7b1661c50306993a3f2b15ca47
  • MD5 4aa9688dc285edff21519f21670558fa
  • SHA1 b0bf67017a6149d096229412b5bdc76bbae8b802
  • SHA512 d9ac6aa678d779f061c852e0983eab9f90090e702e9aa7877bd95517ff310ce741ecac09ec76d9fd64fcd9fc2aed2d0e94180c114fb7524644d89cd2e4ce44ad
  • SSDEEP 393216:jmW7eTw7Bi6+YMris2SmdYBh8B3dLxhq7E3ttgYAAscDG:ZS6BbMv2lKsLr1DAAscS
  • TLSH
    T1100733D7F02C3F4A9216B80DE5C5F483B35B6091CE964E2898180ABBAD95D27FDE1C5C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2
• • Target
    vector magic desktop edition full crack.exe
  • Size 860.0MB
  • SHA256 1623cacbfdbfb57840c4a414b1d1eb384883c33b1a29785945ed2d73e8dc4bd1
  • MD5 b97b68a9ed52c6280ef25ad1e7f76144
  • SHA1 471619a0e90c48ef395352b0f51cbe8393e64a08
  • SHA512 688c1657ba84240dc91f1a740533801fdaa63c01a273487de30196f972d73a696e5e5da9df3789a19ce18adc72768ac052018f596ca2b03a58d3f2f31b8a725a
  • SSDEEP 393216:AAV9Eud9RQM3gwqHrY5sWuotWj9bnUjQJvmXRy8BunZupF5:Agt9lRqHNotWj9bqY8BUy
  • TLSH
    T15E99BF02B7E80066F5BB973489B78612EA36BC511B31D3DF1294A66D2E737C09E34727
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral3behavioral4