Extracted

• • Target
    2026-08-08_5bd218455fc470a2e1892b5a1e731741_frostygoop_hive_knight_luca-stealer_salatstealer_sliver_snatch
  • Size 2.3MB
  • SHA256 dff127242bc75c5de59a7fb3f49a2878859899e6afbcbc02c7dfb23c161e1773
  • MD5 5bd218455fc470a2e1892b5a1e731741
  • SHA1 8b08d5a8d27fc05db5fa6eb49e77ed03b1475957
  • SHA512 1f06a43f4ba6053b3ce214bcb5355932e2c15dbaf601d38279cf306917da99f0dbe2028b45cc27cc7e4e3c7d623973ed2f14255010511645beab0a4c492cf18d
  • SSDEEP 49152:f+WW0mfbaD6GjtWeoEXQ9NBZrDH2k8Lb1:fInT0QNBZfFC
  • TLSH
    T1A7B57C47BCE049E9C0A9933189B752927B31BC184B3273D72E90B6782FB27D09D76B54
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Downloads MZ/PE file

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2