Extracted

• • Target
    2026-08-12_b24ac31015b711de0a36bf7219c4f873_frostygoop_glassworm_hive_knight_luca-stealer_salatstealer_sliver
  • Size 12.2MB
  • SHA256 ebebc96e841a785c39d0553a9ed6947cf6a801c09a531840c5ee72f4852aca84
  • MD5 b24ac31015b711de0a36bf7219c4f873
  • SHA1 6a362c568da70e86c62ac654772e245676591ea6
  • SHA512 c8a6d1dff79032001814f06312dd562b1013cd1a929b5fdd325596be21ba9bfb76b70f47e94b72b0b75608041f0f2790299c77fa02a1480be1fd9352e9b22283
  • SSDEEP 49152:yW1QsmnTUArTHK22/OGqbNecLh/3ACrni35A4trbpTU0awFch:yncOTes4tr91W
  • TLSH
    T1F0D63807BEA504E9C299D735C8AB42227B74BC4C4B3233D32E90AA782F767D09D75B54
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  remus_stealerspywarestealerdiscovery

  • Detects Remus stealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2