https://www.virustotal.com/en/file/211c2d3f510acbbe3ce14f2d2d28dde82acb51703fd5d8d74af998d10f40ac65/analysis/ … Loads: https://www.virustotal.com/en/file/1c0263ed918026593309c0e7da06feda293cee24a0eaab63ef341326240776e1/analysis/1449855622/ … Drops: https://www.virustotal.com/en/file/f6c0ef2170ba5ae47f11cb1ce4bbfb1ff4185469b7388a7ab6460d7888e6676d/analysis/1449855714/ … POSTs stolen data to: http://188.166.39.96/api2.php
-
@malwrhunterteam@JAMESWT_MHT Steals from browsers and Steam. cc@bartblaze
