Files
MBCProject-mbc-markdown/collection/cryptocurrency.md
T
Ryan Xu f7d92d59fa Staging (#124)
- Updating capa detection in behaviors
- Newsletter
- Conti malware
- pafish faq
2023-09-20 15:57:32 -04:00

1.3 KiB

ID B0028
Objective(s) Collection, Credential Access
Related ATT&CK Techniques None
Version 2.1
Created 14 August 2020
Last Modified 12 June 2023

Cryptocurrency

Malware accesses files that contain sensitive data or credentials related to Bitcoin and other cryptocurrency wallets.

Methods

Name ID Description
Bitcoin B0028.001 Access Bitcoin data.
Ethereum B0028.002 Access Ethereum data.
Zcash B0028.003 Access Zcash data.

Use in Malware

Name Date Method Description
ElectroRAT 2020 -- ElectroRat examines the disk for cryptocurrency addresses and keys to steal money from a wallet. It compromises multiple currencies, including Monaro, Doegecoin, Ethereum, Litecoin, and Bitcoin. [1]

References

[1] https://www.intezer.com/blog/research/operation-electrorat-attacker-creates-fake-companies-to-drain-your-crypto-wallets/