Extracted

• • Target
    2026-07-27_924b3d97ddbab1c8bd43d327792c8847_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
  • Size 2.3MB
  • SHA256 63680c705ae737781cd1823c8ea8d06f81b2bf655e15b8a99710eefb66fd5ca3
  • MD5 924b3d97ddbab1c8bd43d327792c8847
  • SHA1 a58c22e4629daa6a2073e610b31fa7838fd174b4
  • SHA512 ddb42f3af55a8d67c1306a3e8f9a3714fad25d68d1c48229204f66cd5dc9c3f91bd1af3517dfd881865998913daf025c8b906e1c2315a2aa97c4db191c07f93e
  • SSDEEP 49152:tMJzF0M++jqpjTkpELJTmmXueXut6qInh02thm5zXrqRRcaZL4l93xAiKx6j9sAO:tMj0P9cwz/
  • TLSH
    T1B0B55A07BCE049E9C4AA973189A712967B75FC080B3163DB2E90B7B82F72BD09D35754
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2