Stresspaint Malware Steals Facebook Credentials and Session Cookies
Tags
| country: | Pakistan Vietnam |
| attack-pattern: | Data Direct Control Panel - T1218.002 Credentials - T1589.001 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | d0348757-057d-4db6-9800-07ad1ebf0885 |
| Fingerprint | a538aa72ada64641 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | April 18, 2018, midnight |
| Added to db | Sept. 26, 2022, 9:31 a.m. |
| Last updated | Sept. 4, 2024, 1:08 a.m. |
| Headline | Stresspaint Malware Steals Facebook Credentials and Session Cookies |
| Title | Stresspaint Malware Steals Facebook Credentials and Session Cookies |
| Detected Hints/Tags/Attributes | 31/2/6 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 1 | xn--80a2a18a.net |
|
| Details | Domain | 3 | aol.net |
|
| Details | File | 1 | updata.dll |
|
| Details | File | 1 | dx.exe |
|
| Details | Windows Registry Key | 1 | HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Updata |
|
| Details | Windows Registry Key | 1 | HKCU\Software\Classes\VirtualStore\MACHINE\SOFTWARE\RelieveStressPaint\guid |