PULSE NAME
New Info-stealer Disguised as Crack Being Distributed
WHITE AlienVault 2022-06-29 Modified: 2022-06-29
258
IOCs
HIGH VOLUME
Researchers found various malware types that are being distributed by disguising themselves as software cracks and installers. CryptBot, RedLine, and Vidar are major example cases. Recently, a single malware type of RedLine has disappeared (it is still being distributed as a dropper type) and a new infostealer malware is being actively distributed instead. Its distribution became in full swing starting from May 20th, globally categorized as “Recordbreaker Stealer.” Some analyses see it as a new version of Raccoon Stealer.
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
Recordbreaker RedLine Stealer Vidar ClipBanker CryptBot Raccoon
Indicators of Compromise (3 / 258 total)
All BitcoinAddress FileHash-MD5 domain
TYPEINDICATORDESCRIPTIONCREATED
BitcoinAddress 19iQuuqoVQPAtRhzm4GvNuM3bj4Nm29ByX 2022-06-29
BitcoinAddress 32h53ccRQW6Vyw4rqR22xmip34WcC6pnFL 2022-06-29
BitcoinAddress bc1qnd4p4vh6zvq68s7m70dvuzejfq2rfmqdlzmmse 2022-06-29