Extracted

• • Target
    2026-08-19_61c9695c922fe40a4fdcacb0993782ff_frostygoop_hive_luca-stealer_salatstealer_sliver
  • Size 2.3MB
  • SHA256 879d079f0424cb531e8946265e1448ead25055c521b3e940de392ad21e0b1a86
  • MD5 61c9695c922fe40a4fdcacb0993782ff
  • SHA1 7c16a5b5a0caf8be8bb2bd428c496e130858b726
  • SHA512 8c243b0e87e89f7669e3f2af8e17cc2a78df8ac2be7a8d098895ddecc00ceeceb04e5bd60907a04fc8af5e6103debac60fa9e8b13d205f3ce7d9b5057712ce3c
  • SSDEEP 24576:4o2uAqYtiIfTZHuRUtvSFcuVkS84zxTkzrNUmkDCvflqaUYNy6iG:7AqYti+FJA+J41TOrNHZlqBG
  • TLSH
    T18BB55B077E8041A5D49AE735C9B64251A330BC4C873637D72F91AAB02F727D2AE76F24
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2