Azorult

An information stealer that was first discovered in 2016, targeting browsing history and passwords.

Oski

Oski is an infostealer targeting browser data, crypto wallets.

Raccoon

Simple but powerful infostealer which was very active in 2019.

suricata: ET MALWARE Suspicious Zipped Filename in Outbound POST Request (Passwords.txt)

suricata: ET MALWARE Suspicious Zipped Filename in Outbound POST Request (Passwords.txt)

suricata: ET MALWARE Vidar/Arkei/Megumin/Oski Stealer Data Exfil

suricata: ET MALWARE Vidar/Arkei/Megumin/Oski Stealer Data Exfil

suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M5

suricata: ET MALWARE Win32/AZORult V3.3 Client Checkin M5

Blocklisted process makes network request

Downloads MZ/PE file

Executes dropped EXE

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.