Extracted

• • Target
    2026-07-28_f34a4adae42ae10794fca1fc9ea06c46_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
  • Size 6.5MB
  • SHA256 02941418554ef4b671a86af571cdada8718de1c2988860f7ea6819338424d828
  • MD5 f34a4adae42ae10794fca1fc9ea06c46
  • SHA1 76c007d2f33e0968ba375e83c0bd793dbcc5ea1a
  • SHA512 f4c3f8bf3d5677f53b513a076a368cc92c8eeb3cad2d688e3c245e3e472bf3e20acfd0a580c06cd6f1e32df0ec79d7ad705c9cf2953730e33ab5f953f8e9ce3e
  • SSDEEP 98304:IC6ie7reU9UdXxQihWHnWEEbQ4pR7RNFr5tChi+EtkQKFKfKKr:IC4t9U5DWHnWxpRRb9WEJyKfK0
  • TLSH
    T1D166DF07BDA149F6C099A33289B352527B71BC085B3233DB2E90B7382E727D16D79B54
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2