Extracted

• • Target
    shaun.of.the.dead.2004.hdrip.x264-sun.300mb.mkv.exe
  • Size 898.9MB
  • SHA256 9ad0f5f23fddf0e1cb4a724a4a0c434453bc86a41f27cd75a4583cb56c3d8417
  • MD5 70076b9fd7ef3c149e3ce5fa9aaff9b1
  • SHA1 e0171e104a216893b2df17441328f7c9a0a636a4
  • SHA512 0efb6a5dfff376db8ba6013c9858ab63c0442e377899e1dc45e245c716186564b0757a4e03ead6066a95812fdcfd416ab64e40568b8e926b5561982f790362b0
  • SSDEEP 393216:FU1f9Nu3+3X6JBDMIo+IZ4K26Q/DkZXpym3b90BAnBdQdWL+DGhFL:Fof9A3k5IW22F48J0BBw
  • TLSH
    T12DA9CF02B7E80065E0B7973485B79A12EA36BC511B31D3DF1294A66D2F737C0AF35B26
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  remus_stealerspywarestealerdiscovery

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Downloads MZ/PE file

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2