Extracted

• • Target
    2026-08-09_284f90f43a56e5c6f005ccbc30a2e8d7_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
  • Size 4.9MB
  • SHA256 094893b22eabd0be6bf37b2097928fccc42b1c72e3a82bed4a4f95b97f05e50f
  • MD5 284f90f43a56e5c6f005ccbc30a2e8d7
  • SHA1 4560132eae16e8068093c0c7fd198f3181ef3c97
  • SHA512 1b06d97823c320ba56d52914cb8f92b6032011109083c952e36aa1f69a9ec5e2b78368d3f3581c43e02d9520a604a55af3688d57d2c826dc79636669bc9dfb10
  • SSDEEP 49152:HLL+FlzMYLzOb4eBPFGbrQj43RSc1YH+Yor1eJfYcqV/:H32K46to443RScw0K+V/
  • TLSH
    T127363903ADA508F9C19AD73188A752527B74BC4C4B3133E32EA0BAB82F767D15E35B54
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2