Description
A C++ stealer distributed widely in bundle with other software.
7566cafb19648f4bd31318201df9eaf8a47ce0633d7c76de92bca0a9867bc2ad
393KB
211205-m35ccacchm
b6aebbb102bb26e4c0558205bd656d99
1428c1abc805e0cb7f3fce79caca068b22eb9324
7566cafb19648f4bd31318201df9eaf8a47ce0633d7c76de92bca0a9867bc2ad
9b1efe64c6fe992e1ae3b17ff9eb2ec4e819eb75ae47e0d712cee6ca1753905a2648c91534b04eb522c9aa093bddcc106bc2f2fc59860b40aa0e442dddaf341a
Family | cryptbot |
C2 |
unic11m.top unic11e.top |
7566cafb19648f4bd31318201df9eaf8a47ce0633d7c76de92bca0a9867bc2ad
b6aebbb102bb26e4c0558205bd656d99
393KB
1428c1abc805e0cb7f3fce79caca068b22eb9324
7566cafb19648f4bd31318201df9eaf8a47ce0633d7c76de92bca0a9867bc2ad
9b1efe64c6fe992e1ae3b17ff9eb2ec4e819eb75ae47e0d712cee6ca1753905a2648c91534b04eb522c9aa093bddcc106bc2f2fc59860b40aa0e442dddaf341a
A C++ stealer distributed widely in bundle with other software.
Tries to access configuration files associated with programs like FileZilla.
Infostealers often target stored browser data, which can include saved credentials etc.
Looks up Uninstall key entries in the registry to enumerate software on the system.