Extracted

• • Target
    2026-07-27_53e6892cf29809cc96d039e87b40fe6d_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
  • Size 2.5MB
  • SHA256 6b301caf8fa54f49ccb7dd08fa5586bf1a0b77cdb92745c1cedef235f1876be8
  • MD5 53e6892cf29809cc96d039e87b40fe6d
  • SHA1 4e50497dcdf40446b8115b073c5167870c579f1f
  • SHA512 1df2239f6d4bd2b9a91d2fe20178bc6f70a2b9fa694d90526554bc4e9e8d32e5b5a7aaabe7b1e064e99a3eadf7dc9c6560cf8f67b5004e7e8f80b9380816ac36
  • SSDEEP 24576:T+NpDgbPP4VIjnm25gCQKoCfvFOVhCA5TaCOLOMO1LvaTa2HfjQTOPZoBele5I9L:T+Nd0PA8nD5gOn3a2cTOCXrI
  • TLSH
    T140C55907BCA109F6C0AAA33289B256527B71BC085B3633E72E90B7782F727D15D35B54
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2