4264a88035aa0b63e9aef96daa78a58114d60a344ea10168a8ef5ef36bf8edbdSHA-256 hash
Reported by 1 independent source · first reported by Trend Micro Research · last reported
Last reported 7 months ago
What the reports say
1 report, newest first · the exact sentence from each-
New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages“In some variants, a .NET executable (SHA256: 4264a88035aa0b63e9aef96daa78a58114d60a344ea10168a8ef5ef36bf8edbd) is used to decode and run a Base64-encoded VBS downloader (SHA256: 433a13cc70396f80dc29d1150c050339d78964fdc91bcdc3f40c67a77add1476).”
Indicators reported together
named in the same reports- hxxps://github[.]com/Voicemod-Pro-Download-Toolin 1 report
- hxxps://voicemod-pro-download-tool.github[.]io/.github/in 1 report
- voicemod-pro-download-tool.github[.]ioin 1 report
- hxxps://github[.]com/Voicemod-Pro-Download-Tool/.githubin 1 report
- hxxps://kiamatka[.]com/kaiok.kakmanin 1 report
- kiamatka[.]comin 1 report
- hxxps://best-tinted[.]com/github-download.htmlin 1 report
- best-tinted[.]comin 1 report
- hxxps://github[.]com/PassFab-4WinKey-Windows-Password-Resetin 1 report
- hxxps://github[.]com/Yim-Mod-Menu/.githubin 1 report
- hxxps://github[.]com/Arena-Breakout-Infinite-ESP/.githubin 1 report
- hxxps://github[.]com/Graphic-Editor-Krita/.githubin 1 report
- fa767391b99865f8…13c3bd4ae4b7in 1 report
- d295720bc0c1111c…f03e2cc44fe5in 1 report
- 1bd605ef84b6767d…75d5bdcf7d76in 1 report
- hxxps://botshield[.]vu/kFcjldin 1 report
- botshield[.]vuin 1 report
- 15de71073f44c657…cc1e5b6bcdd5in 1 report
- 4e90d386c1c7d3d1…b4a1dbab9997in 1 report
- 433a13cc70396f80…67a77add1476in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.