Extracted

• • Target
    2026-08-10_e3950e991fd1043bec9d1fdec0f4b792_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
  • Size 20.0MB
  • SHA256 e97926e253bce3c4ebdd2c3ae590f3ebc0b25a5c436e836ff38b0cd215a12203
  • MD5 e3950e991fd1043bec9d1fdec0f4b792
  • SHA1 92c213a82e8c6fbda00610aefe6efe0cc3b51b53
  • SHA512 88583c38188fd955fa72a47c62b1f172647c46f07e13550d926ea7d43c9de198229c444e3e5c0c2f94865b0bd0b2fc7107a490c5131d89c8949d2dbbd442c235
  • SSDEEP 24576:cxoqppGUoc0H4k+AneclL0AlproBdxWZDLHUEAO1jlA6jZCQA0QAbs5kEOov/paJ:cxog0UgYkNneOtojxW5LHfzwvkpAYKrq
  • TLSH
    T1B0273913AE9148F9C195E735C9B74252BA74BC4C4B3133E32EA0AAB42F763D06E75B44
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2