HackTool.MSIL.ProfileDump.A

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Detalles de entrada

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Otros detalles

Hace lo siguiente:

• It searches for the following file(s): {target directory path}\{existing sub-directory}\logdata → should be an SQL database file
  • checks if "logins" table exists
    • If exists, it queries for the following values and displays them in console:
      • stored login URL of websites
      • date when login entry is stored
• It's main routine may be dependent on the output of the following malware:
  • HackTool.MSIL.PasswordDump.YABHF