Tag: stealer
-
Unmarshalling Malware: Reverse Engineering a Python Infostealer on Windows
This writeup covers my reverse engineering process and analysis on a Python based Windows infostealer that is being actively distributed online. This malware targets browser credentials, crypto wallets, Discord accounts, telegram sessions and includes persistence and privilege escalation mechanisms. The Loader The loader is being distributed as a Roblox shader installer (RobloxShaderCC Setup 1.0.0.exe). I…