Extracted

• • Target
    2026-07-29_277056429f737787734c911071c0297d_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
  • Size 72.5MB
  • SHA256 56d3d6f668a279a23b1d1c6537487cdf1db97c23c726d191fe7ae98ce996de47
  • MD5 277056429f737787734c911071c0297d
  • SHA1 7d404b61e4af49691888ee88290be304da011244
  • SHA512 ffddd9481ce0aa2c69121e16b2c83d4feaa1618706908aa93b921f237aff672376ca6e8b1679d1fb10734e96a6865e431d151e7f702809700ac28b23cd78e00c
  • SSDEEP 1572864:74S06uuSFHmzcxk8zki7KUXJtSsaZaroKz2ytehjC:74GXSFHHxP2uJtSsaZakyth
  • TLSH
    T15EF73306BDA148F6C4AAA33189A366663B75BC086B3233D72E90B7743F327D15D35B44
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2