General

  • Target

    https://bonzi.link

  • Sample

    240328-wcg9kacb8z

Malware Config

Targets

    • Target

      https://bonzi.link

    • Changes its process name

    • Reads the content of photos stored on the user's device.

    • Reads user data of web browsers

      Reads stored browser data which can include saved credentials.

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads CPU attributes

MITRE ATT&CK Matrix

Tasks