: Saved passwords and cookies from Chrome, Firefox, and Edge. FTP Credentials : Accounts from FileZilla and WinSCP. Email Clients : Credentials from Outlook and Thunderbird. System Info : Computer name, IP address, and hardware specs. Anti-Analysis Techniques
The malware contained within this specific archive is programmed to harvest:
: The binary uses Process Hollowing to inject malicious code into a legitimate Windows process (like vbc.exe or RegAsm.exe ).