"Qealler" a new JAR-based Information Stealer

This report analyzes Qealler, a Proguard-obfuscated Java loader masquerading as invoice-related JARs that downloads encrypted modules (7z and qealler), extracts a Python-based credential stealer (QaZaqne/LaZagne), collects system and stored-credential data, encrypts it, and exfiltrates to multiple C2 endpoints; the document documents IOCs (domains, IPs, file hashes), infection mechanics, and payload unpacking.