Live Stream VOD: QVoidStealer .NET Cringe
Added 2023-03-19 00:57:06 +0000 UTCIn this Twitch stream we take a look at QVoid Stealer an open source .NET INFOSTEALER that has been dropped along with RedLine.
Set your expectations low for this one... really F-Tier stealer but we push through the cringe and write a Yara rule and a Config extractor.
Sample
ef7bb2464a2b430aa98bd65a1a40b851b57cb909ac0aea3e53729c0ff900fa42
Notes
QVoidStealer: Lol what is up with these trash .NET stealers
Comments
Lol! Human autocorrect! Ironic given how bad my spelling is normally
OALABS
2023-03-22 17:19:45 +0000 UTCThe malware has typos that you corrected in the yara rule. $m5 = "AntiWebSinffers".
Karsten Hahn
2023-03-22 04:49:04 +0000 UTC
