live casino online

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Este malware no tiene ninguna rutina de propagaci¨®n.

Recopila informaci¨®n espec¨ªfica del sistema afectado.

Detalles de entrada

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

±õ²Ô²õ³Ù²¹±ô²¹³¦¾±¨®²Ô

Agrega las siguientes exclusiones mutuas para garantizar que solo se ejecuta una de sus copias en todo momento:

• c88b0910ed61c17a780135d615c43ef6917616749

±Ê°ù´Ç±è²¹²µ²¹³¦¾±¨®²Ô

Este malware no tiene ninguna rutina de propagaci¨®n.

Robo de informaci¨®n

Recopila la siguiente informaci¨®n del sistema afectado:

• Hostname
• Locale Info

Otros detalles

Hace lo siguiente:

• It impersonates the logged on user.
• It uses the following URL to use Slack's API for its malicious purposes:
  • https://{BLOCKED}k.com/api/conversations.list?exclude_archived=true ¡ú lists all the conversations(channels, direct messages, and group chats) available in the Slack workspace
  • https://{BLOCKED}k.com/api/files.upload?&channels={channel ID} ¡ú uploads a file to one or more channels, direct messages in the Slack workspace
  • https://{BLOCKED}k.com/api/conversations.create ¡ú creates a new channel (public or private) in the Slack workspace
  • https://{BLOCKED}k.com/api/conversations.update ¡ú updates the settings of an existing Slack channel
  • https://{BLOCKED}k.com/api/conversations.delete ¡ú delete a Slack channel (public or private)
  • https://{BLOCKED}k.com/api/conversations.postMessage ¡ú sends a message to a specific conversation in Slack workspace
  • https://{BLOCKED}k.com/api/conversations.history?limit=200&channel={channel ID} ¡ú retrieves the past 200 messages from a specified Slack channel (public or private)
• It retrieves its encrypted component to communicate with Slack workspace using the following URL:
  • https://{BLOCKED}ell.io/notes/58434-3
  • https://{BLOCKED}l.xlog.app/page1
• The Slack communication was established through the use of this hardcoded authentication token:
  • {BLOCKED}19976938784-7094277537125-7090647648246-e3a9e4feeb2fe448f889890be6e1299e ¡ú Inaccessible; Token revoked