2fc970e25570532f9cbe33b7ebfe1f0383a7341aSHA-1 hash
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 3 months ago
What the reports say
1 report, newest first · the exact sentence from each-
ClickLock Stealer: Paste Once, Lose Everything“The file goyim (SHA1 2fc970e25570532f9cbe33b7ebfe1f0383a7341a) is a slightly customized copy of an open-source GSocket deployment script deploy.sh that is available on GitHub and serves as the primary backdoor installer.”
Thanks — we review every report.