Extracted

• • Target
    2026-07-27_312fb655b23543270fca82aee6359ad3_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
  • Size 2.3MB
  • SHA256 4dfaed5461a8a533f8bd965f3d4e7084060948cca09c5cf584867c9b723a6790
  • MD5 312fb655b23543270fca82aee6359ad3
  • SHA1 002b93376f277217d9c6fbb0e1b716028a8caa09
  • SHA512 c66be39f1e44daec3e3eee8eba335a3f577571bf504cfb7b566f28b2659cef69f46260fd78f6ea943515448cda86ad16263d34135a34c16a0c611c45b6010218
  • SSDEEP 49152:IoIPSxCvVdg4+DzC2EAs9wF8TmTnAn6YFfeXj87oZCWzFEEacsvjlFn/artoTLE5:Io/xBBxUoPOg
  • TLSH
    T194B55C07BCE049E9C4AA933189B752967B75BC090B3163DB2E90BB782F727D09D35784
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Downloads MZ/PE file

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2