FreeCryptoScam

ThreatLabz documents a January 2022 'FreeCryptoScam' campaign that lures victims with promises of free cryptocurrency and distributes a downloader (Asprotect-packed) and DCRat, which in turn download/expose Redline and TVRat stealers; the report provides unpacking and behavioral analysis (including AV disablement and data exfiltration), MITRE ATT&CK mapping, sandbox detections, and numerous IOCs (MD5 hashes, domains, and IPs).