Extracted

• • Target
    Fl Studio 2026.exe
  • Size 683KB
  • SHA256 715b4174065916a6412f60b3c10664b323dc737fd717ab09627083be34626fe0
  • MD5 6669e10c960f6c2297bcd3d5a27412aa
  • SHA1 73bee544b24312d0057d9ce5e62daa9f73243d00
  • SHA512 feb1e93aed3f1a0ade6e6ab169af46ddd438aa80f6667fb24421d2f0b7da1c4a4902438421079a75eecfc9a3347c3ebe7f62b88ea9e67a9c951954d8555ea497
  • SSDEEP 12288:tiGbyLR32C4NHhZoLCZcvDaLgf5pB6Nwi5//E7soazN0uahRg:MGboR3P4NHboLCevWLGL6//E7sTN0hhC
  • TLSH
    T1ECE48E2AB3E401F9D1B7D276C9535A26FB71780A1731CBCF03A046562F276A49E3E712
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryremus_stealerspywarestealer

  • Family: Remus

    Remus is a stealer written in C++.

    stealerremus_stealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware
  behavioral1
• • Target
    mpclient.dll
  • Size 3.0MB
  • SHA256 46a8d7079141096583b073ce1cb26c0733fc8220a4e00e664f85fd4efa323bdf
  • MD5 7f9cbd1bac9028340566d4193afb28f7
  • SHA1 972f59b62d6a58d192079d31deb90e07fccc2850
  • SHA512 9bb8f661023719fc8588454b681f6868f1d4ad3b29475e86e505e2a6fbd3a673d0d3fa903c0ae60a631207a15f5136b47bbf49a418d6485314576147f98cd082
  • SSDEEP 49152:3mQ9hhwLBh+oaIr2ihzi71grA+D12VnbMmUJ3OtRnSgvqSZ2rE:3e+0riBY0uPrE
  • TLSH
    T118E57B43BD815171F985D73AC4BA4221B330B8481B3A73D72E51B7B42D32BE45EBAB58
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral2behavioral3