Deep Dive into the M00nD3V Logger

**M00nD3V Logger** is a commercial, multistage .NET infostealer distributed via spam and compromised websites that steals browser/FTP/email passwords, keystrokes, clipboard data, screenshots and webcam images, and implements persistence, process injection, AV-killing and bot-killer functionality; it exfiltrates data over SMTP/FTP/proxy, and the report includes file hashes, the C2 domain (m00nd3v.com), MITRE mappings and decryption scripts.