PsiXBot: The Evolution Of A Modular .NET Bot
ID: fcf09f24-9837-5f06-807c-6ffb9432ec95
STIX ID: report--fcf09f24-9837-5f06-807c-6ffb9432ec95
Feed Name: Fox-IT blog
Threat Score
PsiXBot is a modular .NET botnet actively observed in the wild that evolved into a full-featured information-stealer and remote-access toolset: it supports dynamic modules for browser and Outlook credential theft, keylogging, clipboard crypto-jacking, scheduled persistence, and a QuasarRAT-derived remote client; it has been distributed via SmokeLoader, the Spelevo exploit kit and malspam, communicates with .bit C2 domains over custom DNS, and includes numerous IOCs and sample hashes.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.