VKeylogger

A keylogger first seen in Nov 2020.

VKeylogger Payload

suricata: ET MALWARE Generic -POST To gate.php w/Extended ASCII Characters (Likely Zeus Derivative)

suricata: ET MALWARE Generic -POST To gate.php w/Extended ASCII Characters (Likely Zeus Derivative)

suricata: ET MALWARE Generic Request to gate.php Dotted-Quad

suricata: ET MALWARE Generic Request to gate.php Dotted-Quad

suricata: ET MALWARE Trojan Generic - POST To gate.php with no accept headers

suricata: ET MALWARE Trojan Generic - POST To gate.php with no accept headers

suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer

suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer

suricata: ET MALWARE Win32/Spy.Agent.QAQ Variant CnC Activity

suricata: ET MALWARE Win32/Spy.Agent.QAQ Variant CnC Activity

Downloads MZ/PE file

Executes dropped EXE