Mastodawn

found a #cryptostealer with friend today and the estimated haul is around: @molly [email protected] @web3 [email protected]
$7000 worth of bitcoin,
$562 ETH
$38572 BNB
$52000 tron
$288 cosmos
$48230 cardano
$8Mil SOL
https://github.com/virtuluv/openvpn/
#cryptocurrency

GitHub - virtuluv/openvpn: unpacking and analysis of an openvpn worker script, collecting client hardware info

unpacking and analysis of an openvpn worker script, collecting client hardware info - GitHub - virtuluv/openvpn: unpacking and analysis of an openvpn worker script, collecting client hardware info

GitHub

Show thread

h4sh Oct 31, 2022

Powershell dropper https://www.virustotal.com/gui/file/a8537e90ea4cd573100c8f5461d3cc34a4924d276610968e80fca293e84dbbef

C# binary https://www.virustotal.com/gui/file/0bbf6a3df221628bbfac6d2569688d3ee02d3d39cf4e4842cb3a2e0f713fd6d8/detection

C2 domain cesareurope[.]com https://www.virustotal.com/gui/url/cd437164ff8bf95e6e05041f0381c94364c40c2cab2dee9f753a214bd2603e8b/detection
#ioc #infosec #cryptocurrency
note the wallet balances doesn't mean they are just from this one campaign

VirusTotal