Infostealer C#/.NET Active since 2023

NovaStealer

NovaStealer v3.6.19. Request_For_Quotation is JSE. config:loaded C2 event. HACK comment. Digital obfuscation.

Threat Profile
Type Infostealer
Programming LanguageC#/.NET
C2 ProtocolHTTP
First Seen2023
Targets Kuresel
Purpose / Capabilities
  • Credential Stealer
No C2 servers have been identified for this family yet.

Research Reports (2)

High

NovaStealer v3.6.19 -- Request_For_Quotation_#9505ADC.jse JSE Lür, config:loaded C2 Olay, HACK check module exports | Yüksek

NovaStealer version 3.6.19 4MB Request_For_Quotation_9505ADC.jse JSE lurü. config loaded C2 olay dinleyici. v1788 sayisal obfuscation. HACK check module exports yorumu.

Read Report →
High

Nova Stealer -- JSE 4MB "Request_For_Quotation", v1799 C2 Config, RFQ Lure | Yüksek

Nova Stealer JSE 4MB. "Request_For_Quotation" RFQ lure. v1799["v29"] C2 config değişkeni.

Read Report →