Extracted

• • Target
    2026-08-11_d0d37272fe3d5a2838a0b5def6922999_coinminer_frostygoop_hive_knight_luca-stealer_salatstealer_sliver
  • Size 5.2MB
  • SHA256 26783cd2c87f93891b5e21563fdd6e6bf2d772b10d5bb0e3497b057616feb8c8
  • MD5 d0d37272fe3d5a2838a0b5def6922999
  • SHA1 f96a7cd20803a4795e844fa05a9f4fa1b161eece
  • SHA512 aba8a605ad167a755004c42b6fd2446dd3446524bc88804d8cb22f5f727c5ac21be32fed52f36ac94998f63ddca1bcc04d6522c448cf4d0e5a3d3167a433d999
  • SSDEEP 49152:lZKsjz2N9jGftHJKJYCbDTYpE0KX4wYtf+z8VfIoN0O3fSA+oWf:ldQXEf+zYSPf
  • TLSH
    T160463A13BE9548F5C199A735C8B74626BA70B8094B3133E32E927E782F723D16E35B50
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2