live casino online

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Este malware no tiene ninguna rutina de propagaci¨®n.

Este malware no tiene ninguna rutina de puerta trasera.

Detalles de entrada

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

±Ê°ù´Ç±è²¹²µ²¹³¦¾±¨®²Ô

Este malware no tiene ninguna rutina de propagaci¨®n.

Rutina de puerta trasera

Este malware no tiene ninguna rutina de puerta trasera.

Robo de informaci¨®n

Recopila los siguientes datos:

• Specific Email
• Input Password
• Public IP Address

Informaci¨®n sustra¨ªda

Este malware env¨ªa la informaci¨®n recopilada a la siguiente URL a trav¨¦s de HTTP POST:

• https://{BLOCKED}gram.org/bot78990817{BLOCKED}Gt_J9-Fp0cGhcv7z_gUH1fhcbbrd-I53k/sendMessage?chat_id={BLOCKED}267006

Otros detalles

Hace lo siguiente:

• It disguises itself as a login page to access a document.
  
• It connects to the following URLs for images displayed inside the webpage:
  • https://{BLOCKED}b.co/jWpqmNr/photo-2023-03-14-13-24-45.jpg
  • https://{BLOCKED}ons.com/files/icons/2795/office_2013_hd/2000/excel.png
  • https://{BLOCKED}ns-png.flaticon.com/512/2223/2223615.png
• On first and second login attempt, it will forcibly display an error.
• On the third login attempt, the webpage will be redirected to the following URL:
  • https://{BLOCKED}k.office.com/mail/l