Extracted

• • Target
    2026-08-11_c9570e0950ceeaf6331d24b2f35197d9_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
  • Size 4.4MB
  • SHA256 b431762c4d8a0a25d9a210bbfdfa302c2be3dca39121cf10ede9575332b63ffc
  • MD5 c9570e0950ceeaf6331d24b2f35197d9
  • SHA1 e1e3dc7c6a021f8d4b018ef7600c72d325bd9ce6
  • SHA512 507b105540dfcf3c873064396cc79ea310895476093eb185de3abb659bfd3570964728e9853af207edc13227bdaddaef10257596ac2c8117edca2b095324e283
  • SSDEEP 24576:VM3XNEsIgtLZxWpszVkDLhocDoFnZhaDG3/FeRtr0qslVTYA3Y7TFlfJBele5r91:VM39nIMxLZCFornvaSURiY57/x84rt
  • TLSH
    T15F262817A99148F6C199E736C4BB5615BB70B80D4B3123D31EA1BEB82F323D16E35B84
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2