Infostealer C#/.NET Active since 2015

KeyBase

KeyBase keylogger. Invoice lure, reverse write domain obfuscation. .me TLD C2.

Threat Profile
Type Infostealer
Programming LanguageC#/.NET
C2 ProtocolHTTP/SMTP
First Seen2015
Targets Kuresel
Purpose / Capabilities
  • Keylogger+Credential Stealer
No C2 servers have been identified for this family yet.

Research Reports (1)

High

KeyBase -- invoice.exe 256KB, noitcelfeR (Reflection Tersine) Obfuskasyon | Yüksek

KeyBase invoice.exe 256KB. "noitcelfeR.me" = "Reflection" tersine yazılmış domain obfuskasyonu. .me TLD.

Read Report →